thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Dropper

Malware whose purpose is to install another malicious payload that it carries within itself.

Definition

A dropper contains an embedded payload, often encrypted, which it writes to disk or injects into memory and executes. It is usually the first stage of an infection chain delivered through phishing. Its brevity of activity makes it hard to catch after the fact.

Example

A malicious Excel file that extracts and runs an embedded RAT executable.

Exam tip

Dropper carries the payload inside; a downloader or loader retrieves it from the internet.

Related terms