Netskope Threat Labs

PrivateLoader

ATP Sandbox Adv. HeuristicsAV

PrivateLoader is a modular malware loader whose main capability is downloading and executing one or several payloads on infected systems. It implements anti-analysis techniques, fingerprints the compromised host, and reports statistics to its command and control server. Because the payloads it installs vary by campaign, detections under this name usually sit early in an infection chain rather than marking the final stage.

First seen
September 2022
Last seen
October 2026
Privateloader
Alert Name
ByteCode-MSIL.Trojan.Privateloader
ByteCode-MSIL.Trojan.PrivateLoader
Gen:Heur.Mint.PrivateLoader.1
Win32.Downloader.PrivateLoader
Win32.Exploit.PrivateLoader
Win32.Spyware.Privateloader
Win32.Trojan.Privateloader
Win32.Trojan.PrivateLoader
Win64.Trojan.Privateloader
Win64.Trojan.PrivateLoader