FastLoader (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 15:39:06 UTC
win.fastloader (Back to overview)
FastLoader
FastLoader is a small .NET downloader, which name comes from PDB strings seen in samples. It typically
downloads TrickBot. It may create a list of processes and uploads it together with screenshot(s). In more recent
versions, it employs simple anti-analysis checks (VM detection) and comes with string obfuscations.
References
2020-01-14 ⋅ Malpedia ⋅ Malpedia
Family Page for FastLoader
FastLoader
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.fastloader
https://malpedia.caad.fkie.fraunhofer.de/details/win.fastloader
Page 1 of 1