General

  • Target
    2026-04-13_863e1b4fb5b78bd9d68f12a814eea6d6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
  • Size 355KB
  • Sample260413-tldlmafv9t
  • SHA256 c183ef962a334fd89d301c0cdbd05b4424488b6e2792b9a6b4f7770c4de4c019
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub2

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://mightys.at/tmp/

  • http://mupsin.ru/tmp/

  • http://channelpi.com/tmp/

  • http://mordo.ru/tmp/

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-13_863e1b4fb5b78bd9d68f12a814eea6d6_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
    • Size 355KB
    • SHA256 c183ef962a334fd89d301c0cdbd05b4424488b6e2792b9a6b4f7770c4de4c019
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks