DBatLoader: Actively Distributing Malwares Targeting European Businesses

This Zscaler ThreatLabz research article investigates the latest malware campaign of DBatLoader, which is being used by threat actors to target various businesses in European countries with Remcos RAT and Formbook. The article provides a detailed analysis of DBatLoader’s behavior and its attack process, which includes creating a mock trusted directory, using an executable to load the malicious DLL script, and executing powershell commands in BAT script to exclude Microsoft Defender scanning. The article also highlights the use of different …

analysis antivirus article attack bat businesses campaign countries dbatloader defender detection directory dll formbook latest malicious malware malware campaign malwares microsoft microsoft defender obfuscation powershell process rat remcos remcos rat research scanning script target targeting threat threat actors zscaler