General

  • Target
    2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 1.5MB
  • Sample260409-bb7slsgv9k
  • SHA256 54b222025632f43a4094f74ae9fd73decadf49e0a99443fcd7880c85140407d6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub4

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://humydrole.com/tmp/index.php

  • http://trunk-co.ru/tmp/index.php

  • http://weareelight.com/tmp/index.php

  • http://pirateking.online/tmp/index.php

  • http://piratia.pw/tmp/index.php

  • http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 1.5MB
    • SHA256 54b222025632f43a4094f74ae9fd73decadf49e0a99443fcd7880c85140407d6
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks