Malware
Loader
Also known as: Malware loader, Stage-1 loader
Definition
Malware that prepares the environment and loads further payloads — often directly into memory — for a subsequent stage of an attack.
Examples
- Bumblebee loader observed distributing Cobalt Strike and ransomware.
- Smoke Loader / Dofoil, a long-running pay-per-install loader family.
Related terms
Dropper
Malware whose role is to install ("drop") another malicious payload onto a target system, often after evading initial detection.
Downloader
Lightweight malware whose main function is to retrieve and execute additional malicious payloads from a remote server.
Fileless Malware
Malware that runs primarily in memory and leverages trusted system tools, avoiding the use of traditional executable files on disk.
Command and Control (C2)
The infrastructure and channels attackers use to maintain communication with compromised systems and send them instructions.
Payload
The part of an exploit, malware, or attack that actually performs the malicious action, such as encrypting files, opening a backdoor, or stealing data.
Malware
Any software intentionally designed to disrupt, damage, or gain unauthorized access to computers, networks, or data.