General

  • Target
    2026-04-08_a8b0d74fb3613b456e8cd5eefb93457d_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.5MB
  • Sample260408-s94maag121
  • SHA256 4dddb497c7085f5da7ee9f3ab2f5cf2fdc4700f8175268bfc4ca65a054724f8d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub4

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://humydrole.com/tmp/index.php

  • http://trunk-co.ru/tmp/index.php

  • http://weareelight.com/tmp/index.php

  • http://pirateking.online/tmp/index.php

  • http://piratia.pw/tmp/index.php

  • http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-08_a8b0d74fb3613b456e8cd5eefb93457d_amadey_elex_glassworm_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 1.5MB
    • SHA256 4dddb497c7085f5da7ee9f3ab2f5cf2fdc4700f8175268bfc4ca65a054724f8d
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks