NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/smokedham
● Malware

smokedham

SMOKEDHAM is a Powershell-based .NET backdoor that was first reported in May 2021; it has been used by at least one ransomware-as-a-service affiliate.

View graph Watch Export
Indicators tracked
1
View 1 indicators
Intelligence Reports14
14 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
24 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1132.001: Standard Encoding
source
T1027.009: Embedded Payloads
source
T1056.001: Keylogging
source
T1573.001: Symmetric Cryptography
source
T1087.001: Local Account
source
T1598.003: Spearphishing Link
source
T1082: System Information Discovery
source
T1098.007: Additional Local or Domain Groups
source
T1112: Modify Registry
source
T1136.001: Local Account
source
T1102: Web Service
source
T1564.002: Hidden Users
source
T1041: Exfiltration Over C2 Channel
source
T1059.001: PowerShell
source
T1547.001: Registry Run Keys / Startup Folder
source
T1090.004: Domain Fronting
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1204.001: Malicious Link
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon