BunnyLoader is written in C/C++ and attributed to a threat actor known as PLAYER_BUNNY, also known as PLAYER_BL. Notably, it has been actively developed since early September of the current year, with new features and enhancements continually integrated into the service. Some of the recent updates include advanced anti-sandbox and antivirus evasion techniques facilitated through a fileless loading feature.
Purchasers of a BunnyLoader license gain access to a command and control (C2) panel that enables them to monitor active tasks, track infection statistics, oversee connected and inactive host devices, and more.