MITRE ATT&CKsoftware (malware)

S9025 NOOPLDR

Published 2026-04-17 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2026-04-17

Description

NOOPLDR is a shellcode loader with XML/C# and DLL versions that has been used by MirrorFace to load HiddenFace.

Related

Uses · MITRE ATT&CK (12)

  • T1027.016 Junk Code Insertion sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1127.001 MSBuild sub-technique
  • T1574.001 DLL sub-technique
  • T1564 Hide Artifacts technique
  • T1070.004 File Deletion sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1055 Process Injection technique
  • T1082 System Information Discovery technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References