Loader
HTTP(S) uploader
The HTTP(S) uploader is a Lazarus tool responsible for data exfiltration, by using the HTTP or HTTPS protocols.
HTTP(S) uploader is a Windows loader operated by Lazarus Group.
Background
The HTTP(S) uploader is a Lazarus utility built to exfiltrate data over the HTTP or HTTPS protocols.
It takes as many as 10 command-line parameters: a 29-byte decryption key, a C&C for data exfiltration, the name of a local RAR split volume, the name of the multivolume archive on the server side, the size of a RAR split (max 200,000 kB), the starting index of a split, the ending index of a split, and the -p switch followed by a proxy IP address and port.
Source: Malpedia (Fraunhofer FKIE).