win.icexloader
- Malware type
- downloader, loader
- Family
- Malware family
- Profile updated
- 2026-07-07 15:06:37
Context
IceXLoader is a commercial malware used to download and deploy additional malware on infected machines. The latest version is written in Nim, a relatively new language utilized by threat actors the past two years, most notably by the NimzaLoader variant of BazarLoader used by the TrickBot group. The v1 was written in AutoIT.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Icexloader (report)
- fortinet.com — New Icexloader 3 0 Developers Warm Up To Nim (report)