Skip to content
MalwareWiki

Loader

win.icexloader

IceXLoader is a commercial malware used to download and deploy additional malware on infected machines.

win.icexloader is a Windows loader.

Background

IceXLoader is commercially sold malware whose purpose is to fetch and run further malware on the systems it infects. Its newest iteration is coded in Nim, a fairly recent language that threat actors have picked up over the past two years, most prominently in the TrickBot group's NimzaLoader variant of BazarLoader.

Version 1 was instead written in AutoIT.

Source: Malpedia (Fraunhofer FKIE).