General
- Target 2026-04-06_514eaf43b555fa648ed36353fbec2cbf_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
- Size 507KB
- Sample260406-vq136agy2p
- SHA256 15b5a689b11694bc7ae8059a14776d90217cee667cc092c349a41bdbbf6f2ba8
- MD5 514eaf43b555fa648ed36353fbec2cbf
- SHA1 3c5267cf6a25196fc1be8c7281e064d50b5ad44b
- SHA512 dc0b23beef3df86ba7f4037eb8650617b02ee7b84a544711b4d997a044a32214e2d3e9a6c2518af76c592f74eb46b7a113916ace119bb7f3d55060725403ba43
- SSDEEP 6144:rugKLL0v9fBNo/2oLOjzdnfKVvSqer5+nYCSqer5+nDFoy:rugKH0v9f95KBer5+n9er5+nZoy
- TLSH T1C5B41A0B66A17CD6E9324F329D2DC5D4732EB4B2AE452B663194931F0C762B5CE23F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-06_514eaf43b555fa648ed36353fbec2cbf_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_r.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-06_514eaf43b555fa648ed36353fbec2cbf_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_r.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
lab
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://host-file-host6.com/
-
http://host-host-file8.com/
rc4.i32
rc4.i32
Targets
-
- Target 2026-04-06_514eaf43b555fa648ed36353fbec2cbf_amadey_cobalt-strike_elex_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
- Size 507KB
- SHA256 15b5a689b11694bc7ae8059a14776d90217cee667cc092c349a41bdbbf6f2ba8
- MD5 514eaf43b555fa648ed36353fbec2cbf
- SHA1 3c5267cf6a25196fc1be8c7281e064d50b5ad44b
- SHA512 dc0b23beef3df86ba7f4037eb8650617b02ee7b84a544711b4d997a044a32214e2d3e9a6c2518af76c592f74eb46b7a113916ace119bb7f3d55060725403ba43
- SSDEEP 6144:rugKLL0v9fBNo/2oLOjzdnfKVvSqer5+nYCSqer5+nDFoy:rugKH0v9f95KBer5+n9er5+nZoy
- TLSH T1C5B41A0B66A17CD6E9324F329D2DC5D4732EB4B2AE452B663194931F0C762B5CE23F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Smokeloader family
-
Deletes itself
-
Suspicious use of SetThreadContext