Browse Definitions :
Definition

dropper

Contributor(s): Matthew Haughn

A dropper is a malware installer that surreptitiously carries viruses, back doors and other malicious software so they can be executed on the compromised machine. Droppers don’t cause harm directly but can deliver a malware payload onto a target machine without detection.

Droppers are often disguised and hidden in a computer’s directories (folders), so that although they are visible, they look like valid programs or file types. The dropper itself may contain one or a number of types of malware, perhaps with other features to prevent detection by antivirus software and facilitate stealthy installation.

Droppers aren't associated with any file extensions, which makes them harder to detect. The software is often in the form of a Trojan horse that gains entry to a system via an email attachment or along with a download. As such, droppers are often part of a spear phishing attempt. Droppers may require user execution but they can also be executed through exploitation of a security vulnerability.

Although droppers are traditionally standalone programs, their capabilities are increasingly included as part of a malware package. In late 2014, for example, the FBI reported that malware used in attacks on Sony associated with their movie The Interview came wrapped in an executable dropper that installed itself as a Windows service.

This was last updated in January 2015

Continue Reading About dropper

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • payload (computing)

    In computing, a payload is the carrying capacity of a packet or other transmission data unit. The term has its roots in the ...

  • passphrase

    A passphrase is a string of characters longer than the usual password (which is typically from four to 16 characters long) that ...

  • Web application firewall (WAF)

    A Web application firewall (WAF) is a firewall that monitors, filters or blocks traffic to and from a Web application. WAFs are ...

SearchHealthIT

SearchDisasterRecovery

SearchStorage

  • computational storage

    Computational storage is defined as an architecture that couples compute with storage in order to reduce data movement. In doing ...

  • data deduplication

    Data deduplication -- often called intelligent compression or single-instance storage -- is a process that eliminates redundant ...

  • public cloud storage

    Public cloud storage, also called storage-as-a-service or online storage is a service model that provides data storage on a ...

Close