Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:58:25 UTC
Home > List all groups > List all tools > List all groups using tool Ps2dllLoader
 Tool: Ps2dllLoader
Names Ps2dllLoader
Category Malware
Type Loader
Description
(Bitdefender) The Ps2dllLoader, a loader used to load the .net malware in memory using a
combination of .net and PowerShell features, seems to be replaced by a new mechanism of
loading the .net payloads using msbuild.exe and C# payloads that use
Microsoft.Build.Utilities. Task to load and execute the agents.
Information
<https://blogapp.bitdefender.com/labs/content/files/2024/05/Bitdefender-Report-DeepDive-creat7721-en_EN.pdf>
Last change to this tool card: 18 June 2024
Download this tool card in JSON format
All groups using tool Ps2dllLoader
Changed Name Country Observed
APT groups
  Unfading Sea Haze 2018  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b031414c-2b26-4748-9598-48170302b262
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b031414c-2b26-4748-9598-48170302b262
Page 1 of 1