S0649 SMOKEDHAM

malwareEnterprise

platformsWindows

also known asSMOKEDHAM

SMOKEDHAM is a Powershell-based.NET backdoor that was first reported in May 2021; it has been used by at least one ransomware-as-a-service affiliate.

01

techniques used (21)

ATT&CK techniques this enables or maps to.

02

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan