Rockloader

First seen
2016-02-01 00:00:00
Malware type
loader
Family
Malware family
Profile updated
2026-07-07 13:47:44

Targeted industries: financial-services technology-and-telecommunications retail-and-hospitality

Context

Rockloader is a malware loader known for downloading additional malicious payloads onto infected systems. It has been used in various cybercriminal operations and is often utilized to facilitate the delivery of other malware types.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Rockloader_Auto (yara-rule)

Reports & references

  • blog.intel471.com — A Brief History Of Ta505 (report)
  • intel471.com — A Brief History Of Ta505 (report)
  • Trend Micro — Ssl Tls Technical Brief (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Rockloader (report)
  • proofpoint.com — Locky Ransomware Cybercriminals Introduce New Rockloader Malware (report)

External references