TerraLoader

Internal ID: win.terra_loader

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying win.terra_loader. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

TerraLoader is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/Additional%20Analysis/Terraloader/2021-03-25/Analysis.md#terraloader--congrats-you-have-a-new-fake-job-

→https://medium.com/walmartglobaltech/a-re-look-at-the-terraloader-dropper-dll-e5947ad6e244

→https://quointelligence.eu/2020/07/golden-chickens-evolution-of-the-maas/

→https://www.esentire.com/blog/hackers-spearphish-corporate-hiring-managers-with-poisoned-resumes-infecting-them-with-the-more-eggs-malware

→https://www.esentire.com/security-advisories/hackers-spearphish-professionals-on-linkedin-with-fake-job-offers-infecting-them-with-malware-warns-esentire

→https://www.esentire.com/web-native-pages/unmasking-venom-spider

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.terra_loader

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search TerraLoader