CyberSecurityBoardThreat Intel · CVEs · Products
Malware

Potemkin Loader: A Custom x64 Loader Using DGA for C2 Discovery

June 25, 2026

Potemkin is a custom x64 loader that uses a domain generation algorithm (DGA) to find its C2 server. It reflectively loads follow-on modules like EtherRAT and RMMProject. The loader supports DGA-driven C2 discovery, victim identification via UUID, task polling, and custom byte cipher for communication protection.