Skip to content

Loader

Colibri Loader

According to cloudsek, Colibri Loader is a form of malware designed to facilitate the installation of additional malware types on an already compromised system.

Colibri Loader is a Windows loader.

Background

According to cloudsek, Colibri Loader is malware built to help install further malware onto an already compromised machine. To frustrate detection and analysis it leans on techniques such as omitting the Import Address Table (IAT) and encrypting its strings. Like other loaders, Colibri can be used to drop information-stealing malware, which may result in substantial loss of sensitive data, so users are advised to be wary of unfamiliar files appearing on their systems.


Source: Malpedia (Fraunhofer FKIE).