General
- Target 2026-10-30_7d98b4a2cb23900fd997884b6c1e0fcf_amadey_cobalt-strike_elex_smoke-loader
- Size 291KB
- Sample261101-abp25ast4n
- SHA256 d7e4896bdb9c0c61c626dd3b8beb56fff105f6b5c2607b65949c9eaa57317b2f
- MD5 7d98b4a2cb23900fd997884b6c1e0fcf
- SHA1 084e95deae344b0ff8f5b964d1949cd1149358eb
- SHA512 73604b05a1b7f7fd00d733d3bd4cdc9f94038feaf44a1a650cfa660f3145e255e238e481c1158f2b295ac3419031e407b27b5c03c727228d973b66ba5ba60daa
- SSDEEP 6144:sen0GFSXIQt9SXuZet0ySbhH+y095OhF/V:R0GwXIw9SXuZet0ySbhK95OrN
- TLSH T1C6549E00B7A0C434F1B766F889B693BD793EB9A1AB2890CB62D516EE56356D0DD30307
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_7d98b4a2cb23900fd997884b6c1e0fcf_amadey_cobalt-strike_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_7d98b4a2cb23900fd997884b6c1e0fcf_amadey_cobalt-strike_elex_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://membro.at/upload/
-
http://jeevanpunetha.com/upload/
-
http://misipu.cn/upload/
-
http://zavodooo.ru/upload/
-
http://targiko.ru/upload/
-
http://vues3d.com/upload/
rc4.i32
rc4.i32
Targets
-
- Target 2026-10-30_7d98b4a2cb23900fd997884b6c1e0fcf_amadey_cobalt-strike_elex_smoke-loader
- Size 291KB
- SHA256 d7e4896bdb9c0c61c626dd3b8beb56fff105f6b5c2607b65949c9eaa57317b2f
- MD5 7d98b4a2cb23900fd997884b6c1e0fcf
- SHA1 084e95deae344b0ff8f5b964d1949cd1149358eb
- SHA512 73604b05a1b7f7fd00d733d3bd4cdc9f94038feaf44a1a650cfa660f3145e255e238e481c1158f2b295ac3419031e407b27b5c03c727228d973b66ba5ba60daa
- SSDEEP 6144:sen0GFSXIQt9SXuZet0ySbhH+y095OhF/V:R0GwXIw9SXuZet0ySbhK95OrN
- TLSH T1C6549E00B7A0C434F1B766F889B693BD793EB9A1AB2890CB62D516EE56356D0DD30307
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes itself