Overview

overview

10

Static

static

3

2026-04-12...op.exe

windows10-2004-x64

10

2026-04-12...op.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-04-12_159b8a7f5e9bad50d19afcbed405f488_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop
  • Size 338KB
  • Sample260412-a7f44aev4v
  • SHA256 8a06134daa385d8e345e026f79371afeb52a0fba668511affdefd9cba51c2466
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
smokeloaderpub2backdoordiscoverypersistencetrojan

Malware Config

Extracted

Family

  • smokeloader

Botnet

  • pub2

Extracted

Family

  • smokeloader

Version

  • 2022

C2

  • http://nwgrus.ru/tmp/index.php

  • http://tech-servers.in.net/tmp/index.php

  • http://unicea.ws/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-12_159b8a7f5e9bad50d19afcbed405f488_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop
    • Size 338KB
    • SHA256 8a06134daa385d8e345e026f79371afeb52a0fba668511affdefd9cba51c2466
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorpub2discoverysmokeloaderpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks