Netskope Threat Labs

Dbatloader

ATP Sandbox Adv. Heuristics

Dbatloader is a Delphi loader that abuses cloud storage services such as Google Drive to download its stager component, which carries the actual payload embedded as a resource.

First seen
July 2023
Last seen
September 2026
DBatLoaderDbatLoader
Alert Name
Document-Word.Downloader.DBatLoader
Email-MIME.Trojan.DBatLoader
Script-BAT.Trojan.Dbatloader
Script-JS.Trojan.DBatLoader
Script-WScript.Downloader.DBatLoader
Win32.Exploit.DBatLoader
Win32.Ransomware.DBatLoader
Win32.Trojan.Dbatloader
Win32.Trojan.DbatLoader
Win32.Trojan.DBatLoader