Tool
MemoryModule
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (1)
- To run the payload, the loader unscrambles it in memory and loads it with MemoryModule, an open-source library that loads a DLL without ever writing a normal DLL file to disk. Zalmoxis Stealer Hides Behind Signed Loader and Name-Based Execution
Malware (1)
MITRE ATT&CK (13)
Products (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.