Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:48:56 UTC
Home > List all groups > List all tools > List all groups using tool GammaLoad
 Tool: GammaLoad
Names GammaLoad
Category Malware
Type Backdoor
Description
(Recorded Future) GammaLoad is a custom backdoor used by BlueAlpha, with variants in
both PowerShell and VBScript. In this campaign, the VBScript variant was observed.
Information <https://go.recordedfuture.com/hubfs/reports/cta-ru-2024-1205.pdf>
Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool GammaLoad
Changed Name Country Observed
APT groups
  Gamaredon Group 2013-Feb 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a3a6ff62-22d2-4c62-8984-1b625f97a9bb
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a3a6ff62-22d2-4c62-8984-1b625f97a9bb
Page 1 of 1