General

  • Target
    2026-04-09_8c2faa9549a4b6becff8a7a10fda37ce_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_tofsee
  • Size 1.4MB
  • Sample260409-vh1seshs2t
  • SHA256 6e5c2665a17849472393ae5148fe8bf0d03013f4ee3ee6fadc0ec0fca58f7df5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://sjyey.com/tmp/index.php

  • http://babonwo.ru/tmp/index.php

  • http://mth.com.ua/tmp/index.php

  • http://piratia.pw/tmp/index.php

  • http://go-piratia.ru/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-09_8c2faa9549a4b6becff8a7a10fda37ce_amadey_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_tofsee
    • Size 1.4MB
    • SHA256 6e5c2665a17849472393ae5148fe8bf0d03013f4ee3ee6fadc0ec0fca58f7df5
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks