Smoke Loader Adds Additional Obfuscation Methods to Mitigate Analysis

Smoke Loader Adds Additional Obfuscation Methods to Mitigate Analysis

Sample Analyzed:415a75cd01a4b00385c974b59bbbd3e5211a985bf2560d7639d464fd5a56e9e6 Smoke Loader, also known as Dofoil, has been advertised on dark web forums since at least mid 2011.[1] Since initial release, this modular loader has continued to evolve with the addition of more complex anti-analysis techniques. Modular loaders such as this work by communicating with the command and ... Read More