ModiLoader, DBatLoader

ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Remcos

Remcos is a closed-source remote control and surveillance software.

ModiLoader First Stage

Blocklisted process makes network request

Executes dropped EXE