General

  • Target
    2026-04-12_d343d73d4856f8f1d24b383c4e597b6f_amadey_cobalt-strike_elex_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 503KB
  • Sample260412-bt4hxabx2j
  • SHA256 e73ec15f305eff29794bfaed2986ca49cd680ac136b4475c7faf92e5a7b4d1d3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub3

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://nwgrus.ru/tmp/index.php

  • http://tech-servers.in.net/tmp/index.php

  • http://unicea.ws/tmp/index.php

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-12_d343d73d4856f8f1d24b383c4e597b6f_amadey_cobalt-strike_elex_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 503KB
    • SHA256 e73ec15f305eff29794bfaed2986ca49cd680ac136b4475c7faf92e5a7b4d1d3
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks