General

  • Target
    2026-04-26_1baa261a97b4d3c89e2deab7d0ed31db_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
  • Size 1.2MB
  • Sample260426-ftam2ses91
  • SHA256 dac84a9605faefffe02657a1ef3c1758de782c4fe9e1dd8a2085c9779e83c5a8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Botnet
  • pub1

Extracted

Family
  • smokeloader

Version
  • 2020

C2
  • http://aucmoney.com/upload/

  • http://thegymmum.com/upload/

  • http://atvcampingtrips.com/upload/

  • http://kuapakualaman.com/upload/

  • http://renatazarazua.com/upload/

  • http://nasufmutlu.com/upload/

rc4.i32
rc4.i32

Targets

    • Target
      2026-04-26_1baa261a97b4d3c89e2deab7d0ed31db_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
    • Size 1.2MB
    • SHA256 dac84a9605faefffe02657a1ef3c1758de782c4fe9e1dd8a2085c9779e83c5a8
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks