General

  • Target
    2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop
  • Size 1.4MB
  • Sample260409-a46kkshx2x
  • SHA256 9656d227ed9cb8a10dcd9f7397989837d16782eac24417759d9ba819bf9930ee
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://tnc-corp.ru/tmp/index.php

  • http://volisc.biz/tmp/index.php

  • http://livbev.online/tmp/index.php

  • http://liverds.at/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-09_98e0700f7dd35888cc30829b5f147e4b_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_sakula_smoke-loader_stealc_stop
    • Size 1.4MB
    • SHA256 9656d227ed9cb8a10dcd9f7397989837d16782eac24417759d9ba819bf9930ee
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks