March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – BabyElephant APT Targeting Pakistan – Active IOCs
August 27, 2021
Rewterz Threat Advisory – ICS – Multiple Delta Electronics DIAEnergie Vulnerabilities
August 27, 2021
Rewterz Threat Alert – BabyElephant APT Targeting Pakistan – Active IOCs
August 27, 2021
Rewterz Threat Advisory – ICS – Multiple Delta Electronics DIAEnergie Vulnerabilities
August 27, 2021
Severity
Medium
Analysis Summary
Smokeloader is a popular bot and a veteran in its field, this piece of malware is used mainly for loading other malicious software, usually obtained from a third party. At the same time, it has the capability of loading its own modules, allowing it to conduct a variety of actions without the usage of external components. The seller of Smokeloader (which is known by the handle SmokeLdr) is active in providing this malware as a service to this date.
Impact
- Information Theft
- Exposure of Sensitive Data
Indicators of Compromise
MD5
- a09a430e59106b44d98395a59985c8a2
- 6cc2ab1b3a3f27d0fa759aa8e106ba03
- c2b79f67176c24ccdccf2572812949c2
- 19b6d08e079830c241b79b1f9739d24c
SHA-256
- ce6bf312014f9bb28d9007d7eedb0c455f3bc98196d55955590b7a7af164612a
- 55d5d0ee8d13a19a6bcc3129b7fcbd032b06548feeb46b257ba1b3cbf0deb2a5
- 2e2c3b22a461a389674c11303509a42746fd20a8c91b3e468bee71f28500f7c6
- cb65c5e0d84f555486afbac88df9cf23bc5886d38b313b51bae31dd28f08baef
SHA-1
- 92e555d09c6ab494518482e825c9a54314a7527e
- f3fa389ffde4bb5030771119c21b019fcb6debbd
- 5fd3e2a20b5dc790ab748dbd41131defdec13ca9
- bf95767f6013345e19cf7959637268a4c89b0acb
Remediation
- Exercise caution when receiving messages from unknown senders.
- Block all threat indicators at your respective controls.
- Keep your software updated to the latest patches.
- Search for IOCs in your environment.