✕
Request a Demo
Rewterz
Rewterz Threat Alert – BabyElephant APT Targeting Pakistan – Active IOCs
August 27, 2021
Rewterz
Rewterz Threat Advisory – ICS – Multiple Delta Electronics DIAEnergie Vulnerabilities
August 27, 2021

Rewterz Threat Alert – SmokeLoader Malware – Active IOCs

Severity

Medium

Analysis Summary

Smokeloader is a popular bot and a veteran in its field, this piece of malware is used mainly for loading other malicious software, usually obtained from a third party. At the same time, it has the capability of loading its own modules, allowing it to conduct a variety of actions without the usage of external components. The seller of Smokeloader (which is known by the handle SmokeLdr) is active in providing this malware as a service to this date.

Impact

  • Information Theft
  • Exposure of Sensitive Data

Indicators of Compromise

MD5

  • a09a430e59106b44d98395a59985c8a2
  • 6cc2ab1b3a3f27d0fa759aa8e106ba03
  • c2b79f67176c24ccdccf2572812949c2
  • 19b6d08e079830c241b79b1f9739d24c

SHA-256

  • ce6bf312014f9bb28d9007d7eedb0c455f3bc98196d55955590b7a7af164612a
  • 55d5d0ee8d13a19a6bcc3129b7fcbd032b06548feeb46b257ba1b3cbf0deb2a5
  • 2e2c3b22a461a389674c11303509a42746fd20a8c91b3e468bee71f28500f7c6
  • cb65c5e0d84f555486afbac88df9cf23bc5886d38b313b51bae31dd28f08baef

SHA-1

  • 92e555d09c6ab494518482e825c9a54314a7527e
  • f3fa389ffde4bb5030771119c21b019fcb6debbd
  • 5fd3e2a20b5dc790ab748dbd41131defdec13ca9
  • bf95767f6013345e19cf7959637268a4c89b0acb

Remediation

  • Exercise caution when receiving messages from unknown senders.
  • Block all threat indicators at your respective controls.
  • Keep your software updated to the latest patches.
  • Search for IOCs in your environment.