Skip to content
MalwareWiki

Loader

Croxloader

According to Trend Micro, this is a custom loader for win.cobalt_strike, used by Earth Longzhi (a subgroup of APT41).

Croxloader is a Windows loader.

Background

Per Trend Micro, this is a bespoke loader for win.cobalt_strike, employed by Earth Longzhi, a subgroup of APT41.

Source: Malpedia (Fraunhofer FKIE).