Tag: smoke

1 Attack Reports | 0 Vulnerabilities

Attack reports

Technical Analysis of SmokeLoader Version 2025

SmokeLoader, a modular malware loader active since 2011, has resurfaced with new versions in 2025 after Operation Endgame suppressed its activity. The latest variants, 2025 alpha and 2025, include bug fixes and improvements to evade detection. Key changes include a new mutex check in the stager, mo…
persistence
anti-analysis
malware loader
smokeloader
evasion techniques
dofoil
2025-09-16
smoke
version 2025
network protocol
bug fixes
Published: September 16, 2025
Downloadable IOCs: 24
Click here to see more Attack Reports