General

  • Target
    2026-04-08_6054d126155189f51f2e5d336890cb9a_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
  • Size 767KB
  • Sample260408-gka3wsbs4y
  • SHA256 d20a94538962ac459deadd2c370295359bc2f1a6e68da2c9a528f171afa0d0f1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://sunvi.org/tmp/index.php

  • http://zarya-amura.ru/tmp/index.php

  • http://akros.in.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-08_6054d126155189f51f2e5d336890cb9a_amadey_cobalt-strike_elex_luca-stealer_lynx_mespinoza_njrat_smoke-loader
    • Size 767KB
    • SHA256 d20a94538962ac459deadd2c370295359bc2f1a6e68da2c9a528f171afa0d0f1
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks