General

  • Target
    2026-04-11_01cbc29147f1eefa2efd4b83ded106b8_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop
  • Size 2.2MB
  • Sample260411-rtbe5ady7x
  • SHA256 76a59418c02a759bb723140cb795d41e7813ad027436ce76f0672bc589a59422
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://nidoe.org/tmp/index.php

  • http://sodez.ru/tmp/index.php

  • http://uama.com.ua/tmp/index.php

  • http://talesofpirates.net/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-11_01cbc29147f1eefa2efd4b83ded106b8_darkgate_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop
    • Size 2.2MB
    • SHA256 76a59418c02a759bb723140cb795d41e7813ad027436ce76f0672bc589a59422
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks