Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:34:05 UTC
Home > List all groups > List all tools > List all groups using tool HLOADER
 Tool: HLOADER
Names HLOADER
Category Malware
Type Loader
Description
(Elastic) HLOADER is a payload that attempts to masquerade as the legitimate Discord
application.
Information
<https://www.elastic.co/security-labs/elastic-catches-dprk-passing-out-kandykorn>
<https://objective-see.org/blog/blog_0x73.html>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/osx.hloader>
Last change to this tool card: 17 January 2024
Download this tool card in JSON format
All groups using tool HLOADER
Changed Name Country Observed
APT groups
  Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6cdd8e0d-3532-4fdf-86dc-fa8b286242d8
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6cdd8e0d-3532-4fdf-86dc-fa8b286242d8
Page 1 of 1