General

  • Target
    2026-04-05_a16599bf01236304ab50e2ddabbad828_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_tofsee
  • Size 1.6MB
  • Sample260405-d94vqaet31
  • SHA256 2e869110185548b08501e699d80c74723e74d21ee3df806e2f6679aa131354cc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • lab

Extracted

Family
  • smokeloader

Version
  • 2020

C2
  • http://host-file-host6.com/

  • http://host-host-file8.com/

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-05_a16599bf01236304ab50e2ddabbad828_amadey_elex_glassworm_remcos_rhadamanthys_smoke-loader_stop_tofsee
    • Size 1.6MB
    • SHA256 2e869110185548b08501e699d80c74723e74d21ee3df806e2f6679aa131354cc
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks