Colibri Loader
- Malware type
- loader
- Family
- Malware family
- Profile updated
- 2026-07-07 14:47:21
Context
According to cloudsek, Colibri Loader is a form of malware designed to facilitate the installation of additional malware types on an already compromised system. This loader employs various techniques to evade detection, such as excluding the Import Address Table (IAT) and utilizing encrypted strings to complicate analysis. Similar to other loader malware, Colibri can be utilized to deploy information-stealing malware, potentially leading to significant loss of sensitive data. As a result, users should exercise caution when encountering unfamiliar files on their systems.
Reports & references
- go.recordedfuture.com — Cta 2022 0919 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Colibri (report)
- cloudsek.com — In Depth Technical Analysis Of Colibri Loader Malware (report)
- blog.malwarebytes.com — Colibri Loader Combines Task Scheduler And Powershell In Clever Persistence Technique (report)
- fr3d.hk — Colibri Loader Back To Basics (report)
- github.com — Colibri Loader (report)
- bitsight.com — Unpacking Colibri Loader Russian Apt Linked Campaign (report)