hcdLoader — Malware Profile

hcdLoader is a remote access tool (RAT) that has been used by APT18.

MITRE ATT&CK techniques (2)

• T1059.003 Windows Command Shell
• T1543.003 Windows Service

Attributed threat actors

• APT18

Read the full analysis on IntelFusions