HLOADER (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 15:15:04 UTC osx.hloader (Back to overview) HLOADER Actor(s): Lazarus Group There is no description at this point. References 2024-10-03 ⋅ Virus Bulletin ⋅ Salim Bitam Sugarcoating KANDYKORN: a sweet dive into a sophisticated MacOS backdoor HLOADER KANDYKORN SUGARLOADER 2023-11-27 ⋅ SentinelOne ⋅ Phil Stokes DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads HLOADER KANDYKORN RustBucket SUGARLOADER 2023-10-31 ⋅ Elastic ⋅ Andrew Pease, Colson Wilhoit, Ricardo Ungureanu, Seth Goodwin Elastic catches DPRK passing out KANDYKORN HLOADER KANDYKORN SUGARLOADER There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/osx.hloader https://malpedia.caad.fkie.fraunhofer.de/details/osx.hloader Page 1 of 1