Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 10:57:34 UTC
Home > List all groups > List all tools > List all groups using tool NickelLoader
 Tool: NickelLoader
Names
NickelLoader
CLOUDBURST
Category Malware
Type Downloader
Description
(ESET) NickelLoader is an HTTP(S) downloader executed on the compromised system via
DLL side-loading, which is later used to deliver other Lazarus payloads.
Information
Malpedia Last change to this tool card: 19 June 2024
Download this tool card in JSON format
All groups using tool NickelLoader
Changed Name Country Observed
APT groups
 Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83f6c32d-4e78-4ee0-9b6c-74d344325164
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=83f6c32d-4e78-4ee0-9b6c-74d344325164
Page 1 of 1