General

  • Target
    2026-04-18_fd139c4eb33756a951e4fde9d1704720_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 271KB
  • Sample260418-fl3c4aay5q
  • SHA256 a503496e58bacafcbba70ff667cbd94b645b651f4ba28405a19cc082a20bb6ad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub2

Extracted

Family
  • smokeloader

Version
  • 2020

C2
  • http://aucmoney.com/upload/

  • http://thegymmum.com/upload/

  • http://atvcampingtrips.com/upload/

  • http://kuapakualaman.com/upload/

  • http://renatazarazua.com/upload/

  • http://nasufmutlu.com/upload/

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-18_fd139c4eb33756a951e4fde9d1704720_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop
    • Size 271KB
    • SHA256 a503496e58bacafcbba70ff667cbd94b645b651f4ba28405a19cc082a20bb6ad
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks