Skip to content
MalwareWiki

Loader

Pronsis Loader

According to TrustWave, this is a loader leveraging JPHP, which was observed fetching Latrodectus and Lumma.

Pronsis Loader is a Java loader.

Background

TrustWave identifies this as a JPHP-based loader, seen pulling down Latrodectus and Lumma payloads.

Source: Malpedia (Fraunhofer FKIE).