Extracted

Extracted

• • Target
    2026-04-09_7ae34382b8c45d4ebd22e78ee86e176f_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc
  • Size 813KB
  • SHA256 8e82780c60f513c3bddefba1dc021030abb11e7cbd3c5fead0bccb890f3dbedf
  • MD5 7ae34382b8c45d4ebd22e78ee86e176f
  • SHA1 97d5ab66eba084f8494afb5a6dfb2962ff88efb3
  • SHA512 8b00f787b01f03977c01d2d4b58e72d8324845959cd62d94998c6b29a8dfa9961e1636bd8356390a1173a82db6052a2478ac93e23367bf80e87fd29083ee96c9
  • SSDEEP 6144:MTANJC+3fD5AZgY26AH7vaVRXL4IFchOMScqer5+nBYz89/drLHgDe4ypq6qer5Q:+ANJCqfrrHunL1Jer5+nWA14Per5+n
  • TLSH
    T19D053803F791A9D4D66A46769F2482A4632AF461AE0B6355394C131ECF63387CF62F3C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoorlabdiscoverysmokeloaderpersistencetrojan

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Smokeloader family

    smokeloader

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2