General
- Target 2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
- Size 340KB
- Sample260511-dghrsady7m
- SHA256 5bd58f364b1aaa99ef4e28cb7779e08db4c7a152f82057a5bce7a4b3197df737
- MD5 ad19355ccbe0d6a32ff9010694a46d67
- SHA1 29e46972c8cccea9f36d4f7d6d0af533dcfd0b5a
- SHA512 03b5064162abd70a91e2114cc69cc748db7ea71e9ede2fd672ed8a64760542046ce40b1458ed89ae6c8c07fe487e4e87a03e2a72b66e7ead2493e968a68946e1
- SSDEEP 6144:45mLmiAXAQaVRmZBoDhEuvejcqgd3gSqer5+nDFo:45mKiAwQa+ZBoDhEuWwMer5+nZo
- TLSH T11774AE9A7652F4F2D1620A357824F7E417B7BC726FA055573AD8239E4D322E08E23B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadaman.exe
Resource
win10v2004-20250619-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadaman.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Version
-
2022
C2
-
http://potunulit.org/
-
http://hutnilior.net/
-
http://bulimu55t.net/
-
http://soryytlic4.net/
-
http://novanosa5org.org/
-
http://nuljjjnuli.org/
-
http://tolilolihul.net/
-
http://somatoka51hub.net/
-
http://hujukui3.net/
-
http://bukubuka1.net/
-
http://golilopaster.org/
-
http://newzelannd66.org/
-
http://otriluyttn.org/
rc4.i32
rc4.i32
Targets
-
- Target 2026-05-11_ad19355ccbe0d6a32ff9010694a46d67_amadey_cobalt-strike_elex_njrat_redline-stealer_rhadamanthys_smoke-loader_stop_tofsee
- Size 340KB
- SHA256 5bd58f364b1aaa99ef4e28cb7779e08db4c7a152f82057a5bce7a4b3197df737
- MD5 ad19355ccbe0d6a32ff9010694a46d67
- SHA1 29e46972c8cccea9f36d4f7d6d0af533dcfd0b5a
- SHA512 03b5064162abd70a91e2114cc69cc748db7ea71e9ede2fd672ed8a64760542046ce40b1458ed89ae6c8c07fe487e4e87a03e2a72b66e7ead2493e968a68946e1
- SSDEEP 6144:45mLmiAXAQaVRmZBoDhEuvejcqgd3gSqer5+nDFo:45mKiAwQa+ZBoDhEuWwMer5+nZo
- TLSH T11774AE9A7652F4F2D1620A357824F7E417B7BC726FA055573AD8239E4D322E08E23B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes itself