UULoader Malware Emerges: Targeting Users with Advanced Evasion Tactics

A newly identified malware variant, known as UULoader, is currently being utilized by threat actors to deploy next-stage payloads like Gh0st RAT and Mimikatz. This malware is distributed via malicious installers masquerading as legitimate applications, with a primary focus on Korean and Chinese-speaking users. The presence of Chinese strings within the program database (PDB) files embedded in the DLL suggests that UULoader may have been developed by a Chinese-speaking individual or group.