CLAIMLOADER

CLAIMLOADER is a malware variant that frequently accompanies legitimate executables that are used for DLL side-loading known to be leveraged by Mustang Panda and was first observed utilized in 2021.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

14 relationships

T1053.005: Scheduled Task

source

T1036.005: Match Legitimate Resource Name or Location

source

T1204.002: Malicious File

source

T1559.001: Component Object Model

T1140: Deobfuscate/Decode Files or Information

source

T1480.002: Mutual Exclusion

source

T1547.001: Registry Run Keys / Startup Folder

source

T1027.007: Dynamic API Resolution

source

T1564.001: Hidden Files and Directories

source