General
- Target 2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260409-bb7slsgv9k
- SHA256 54b222025632f43a4094f74ae9fd73decadf49e0a99443fcd7880c85140407d6
- MD5 45eb03148a5eb4699d8652d05b65af26
- SHA1 37760c32d599daf5f89b1696d1ea7dcf63322138
- SHA512 4f04afb3cb8313031c70a0e42bccba598acbdbf6699ecf01b2971ef0d7f13d8a7bf1e028de9c6bab4c9c9aced7a28653ed6cf16c0b0d5834a5d165bf8552c231
- SSDEEP 12288:f62Nb/Vl0jaoer5+nZokL1Jer5+nvA1YaL8i0DMUNLtGjmer5+nIwaJ3er5+n:f60GakLAVDKUb
- TLSH T1DB65F557EB926ED8E65D09365F684150D72EF2229A4F2320346C520DCF9339B8F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhada.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhada.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://humydrole.com/tmp/index.php
-
http://trunk-co.ru/tmp/index.php
-
http://weareelight.com/tmp/index.php
-
http://pirateking.online/tmp/index.php
-
http://piratia.pw/tmp/index.php
-
http://go-piratia.ru/tmp/index.php
rc4.i32
rc4.i32
Targets
-
- Target 2026-04-09_45eb03148a5eb4699d8652d05b65af26_amadey_elex_glassworm_icedid_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 54b222025632f43a4094f74ae9fd73decadf49e0a99443fcd7880c85140407d6
- MD5 45eb03148a5eb4699d8652d05b65af26
- SHA1 37760c32d599daf5f89b1696d1ea7dcf63322138
- SHA512 4f04afb3cb8313031c70a0e42bccba598acbdbf6699ecf01b2971ef0d7f13d8a7bf1e028de9c6bab4c9c9aced7a28653ed6cf16c0b0d5834a5d165bf8552c231
- SSDEEP 12288:f62Nb/Vl0jaoer5+nZokL1Jer5+nvA1YaL8i0DMUNLtGjmer5+nIwaJ3er5+n:f60GakLAVDKUb
- TLSH T1DB65F557EB926ED8E65D09365F684150D72EF2229A4F2320346C520DCF9339B8F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Smokeloader family
-
Deletes itself