Operation Endgame: Up In Smoke
ID: 38fae1d2-a6dd-5793-8f27-310072752e6f
STIX ID: report--38fae1d2-a6dd-5793-8f27-310072752e6f
Feed Name: Zscaler Security Research Blog
Threat Score
This report provides a technical analysis of the Smoke malware family (2017–2022), detailing installation and persistence variations across versions, bot ID and filename generation algorithms, HTTP POST C2 communication using RC4-encrypted packets, supported remote commands (including uninstall and update), and cleanup/forensic artifacts left on infected Windows hosts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.