Malware
Downloader
Also known as: Stage-1 downloader, Trojan downloader
Definition
Lightweight malware whose main function is to retrieve and execute additional malicious payloads from a remote server.
Examples
- Hancitor (Chanitor), a long-running document-based downloader.
- GuLoader, a downloader that retrieves payloads from cloud storage providers.
Related terms
Dropper
Malware whose role is to install ("drop") another malicious payload onto a target system, often after evading initial detection.
Loader
Malware that prepares the environment and loads further payloads — often directly into memory — for a subsequent stage of an attack.
Command and Control (C2)
The infrastructure and channels attackers use to maintain communication with compromised systems and send them instructions.
Trojan Horse
Malware that disguises itself as a legitimate program to trick users into running it, delivering a hidden malicious payload.
Payload
The part of an exploit, malware, or attack that actually performs the malicious action, such as encrypting files, opening a backdoor, or stealing data.
Malware
Any software intentionally designed to disrupt, damage, or gain unauthorized access to computers, networks, or data.