Skip to content
MalwareWiki

Loader

QuanPinLoader

According to ESET Research, this is a loader that has the Mandarin Chinese symbol (yang in the Pinyin transliteration) as an icon in the resources.

QuanPinLoader is a Windows loader operated by Lazarus Group.

Background

ESET Research reports that this loader carries the Mandarin Chinese character (rendered as yang in Pinyin) as a resource icon. Its resources also include the string SampleIMESimplifiedQuanPin.txt, hinting that it was likely derived from the open-source Sample IME project, a TSF-based demonstration input method editor.

Source: Malpedia (Fraunhofer FKIE).