# FastLoader

**malpedia.caad.fkie.fraunhofer.de/details/win.fastloader**

win.fastloader

FastLoader is a small .NET downloader, which name comes from PDB strings seen in
samples. It typically downloads TrickBot. It may create a list of processes and uploads it
together with screenshot(s). In more recent versions, it employs simple anti-analysis checks
(VM detection) and comes with string obfuscations.

References

2020-01-14 ⋅ [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/library?search=Malpedia) ⋅ [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/library?search=Malpedia)

Family Page for FastLoader

[FastLoader](https://malpedia.caad.fkie.fraunhofer.de/details/win.fastloader)

There is no Yara-Signature yet.


-----