Content available in original language
class="post-article">
Loader C#/.NET Active since 2025

CoolProjectLoader

virtual takma adli gelistirici tarafindan uretilen iki asamali .NET yukleyici. PDB yolu: D:\Users\virtual\Desktop\Malware\projects\cool project lol. Birinci asama LoaderBootstrap, ikinci asama Loader. Kotu amacli PE'ye sahte GUI kaynak enjekte eder (Injected benign GUI resourceMZ) AV taramasi atlama icin. System.IO.MemoryMappedFiles ile bellek haritalama yapar.

Threat Profile
Type Loader
Programming LanguageC#/.NET
C2 Protocolcustom
First Seen2025
Targets Kuresel
Purpose / Capabilities
  • Loader/Injector
No C2 servers have been identified for this family yet.

Research Reports (1)

Yüksek

CoolProjectLoader 2eac9624 -- virtual-developer cool-project-lol Injected-benign-GUI-resourceMZ LoaderBootstrap MemoryMappedFiles AES-payload net48-stub | Yuksek

CoolProjectLoader 2eac9624 PE32+ .NET 907KB. Gelistirici: virtual, proje: cool project lol. Injected benign GUI resourceMZ. LoaderBootstrap 2-asamali yukleyici. MemoryMappedFiles.

Read Report →