Samplepedia
SmokedHam - Malware Analysis
·691 words·4 mins
This blog presents the analysis of a Smokedham Remote Access Trojan (RAT) sample with a focus on Binary Refinery pipeline construction The malware uses a multi-stage execution chain involving a Python byte-compiled loader, an embedded PowerShell runtime, and a final in-memory .NET implant.