General

  • Target
    2026-04-08_0c5bb88d009b44dd9ad526a8e3d04dbe_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc
  • Size 532KB
  • Sample260408-eca2tahz2v
  • SHA256 9ae8af4ded71b47b54a3c086f739e9b91ae840e5b2573ac38e74f861d35e4f02
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub4

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://aapu.at/tmp/

  • http://poudineh.com/tmp/

  • http://firsttrusteedrx.ru/tmp/

  • http://kingpirate.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-08_0c5bb88d009b44dd9ad526a8e3d04dbe_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc
    • Size 532KB
    • SHA256 9ae8af4ded71b47b54a3c086f739e9b91ae840e5b2573ac38e74f861d35e4f02
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks