General

  • Target
    2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
  • Size 340KB
  • Sample260511-dghrsady7m
  • SHA256 5bd58f364b1aaa99ef4e28cb7779e08db4c7a152f82057a5bce7a4b3197df737
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • smokeloader

Version
  • 2022

C2
  • http://potunulit.org/

  • http://hutnilior.net/

  • http://bulimu55t.net/

  • http://soryytlic4.net/

  • http://novanosa5org.org/

  • http://nuljjjnuli.org/

  • http://tolilolihul.net/

  • http://somatoka51hub.net/

  • http://hujukui3.net/

  • http://bukubuka1.net/

  • http://golilopaster.org/

  • http://newzelannd66.org/

  • http://otriluyttn.org/

rc4.i32
rc4.i32

Targets

    • Target
      2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
    • Size 340KB
    • SHA256 5bd58f364b1aaa99ef4e28cb7779e08db4c7a152f82057a5bce7a4b3197df737
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks