Attacks and malware

What is Dropper?

A small piece of malware that carries another malicious program inside it and installs it on the victim's machine.

A dropper is a small program that carries another malicious file inside itself and writes it to disk or into memory on the victim machine. The difference from a loader is that the payload is bundled rather than downloaded, although the terms are often used loosely.

Droppers usually hide the payload with encryption or compression, so the dangerous code is only visible after the dropper runs. Sandboxes and memory analysis help recover it.

Where you learn it

See Dropper in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free