Croxloader

According to Trend Micro, this is a custom loader for win.cobalt_strike, used by Earth Longzhi (a subgroup of APT41).

Family metadata imported from Malpedia (Fraunhofer FKIE).