Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:03:28 UTC
Home > List all groups > List all tools > List all groups using tool RAILLOAD
 Tool: RAILLOAD
Names RAILLOAD
Category Malware
Type Loader
Description
(Trend Micro) RAILLOAD is a loader tool executed via DLL side-loading and is used for
second-stage loading.
Information <https://www.trendmicro.com/en_us/research/25/c/the-espionage-toolkit-of-earth-alux.html>
Last change to this tool card: 21 April 2025
Download this tool card in JSON format
All groups using tool RAILLOAD
Changed Name Country Observed
APT groups
  Earth Alux 2023  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7ab69b81-f29b-4a8c-a05b-8413c796e0db
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7ab69b81-f29b-4a8c-a05b-8413c796e0db
Page 1 of 1