Netskope Threat Labs

IQYDownloader

ATP Sandbox Adv. HeuristicsAV

IQYDownloader is a downloader that exploits Microsoft Office features, including Internet Query (IQY) files, to download and execute additional malware payloads from remote servers.

First seen
January 2022
Last seen
October 2026
Alert Name
DeepScan:Generic.IQYDownloader.2.FFFFFFFE
Document-Excel.Downloader.IQYDownloader
Document-Excel.Exploit.IQYDownloader
Document-Office.Downloader.IQYDownloader
Document-Office.Trojan.IQYDownloader
Dump:Generic.IQYDownloader.3.FFFFFFFE
Generic.IQYDownloader.1.28BF0E82
Generic.IQYDownloader.1.2FE4749C
Generic.IQYDownloader.1.65001743
Generic.IQYDownloader.1.70D567FC