2026-04-04_e0e62ed285d54f2f46a21b999d175e4b_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
Classification: Malicious
2026-04-04_e0e62ed285d54f2f46a21b999d175e4b_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop is a trojan.
Detection summary
- 52 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: SMOKE LOADER (S0226)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Smokeloader | Triage | 2026-04-04 17:06:15 | 2026-04-04 17:06:15 | malicious-activity | S0226 Smoke Loader |
Tags
smokeloader pub1 backdoor discovery persistence trojanSample information
- Filenames
- 2026-04-04_e0e62ed285d54f2f46a21b999d175e4b_amadey_cobalt-strike_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- SHA-256
8db8ef32f348eba76595d3449fdb0b27785a8fe7701ab615d993b895817971c2- First indexed
- 2026-04-04 17:06:15
- Last updated
- 2026-10-16 04:34:43
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Application.Jaik.43056 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Drp] |
| AhnLab-V3 | Trojan/Win.PWSX-gen.R671781 |
| Alibaba | Backdoor:Win32/Smokeloader.04295934 |
| Antiy-AVL | Trojan[Backdoor]/Win32.Mokes |
| Arcabit | Trojan.Application.Jaik.DA830 |
| Avast | Win32:MalwareX-gen [Drp] |
| BitDefender | Gen:Variant.Application.Jaik.43056 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Backdoor.Mokes |
| CTX | exe.trojan.mokes |
| ClamAV | Win.Packer.pkr_ce1a-9980177-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.MulDrop28.30779 |
| ESET-NOD32 | Win32/Kryptik.HYCA trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Application.Jaik.43056 (B) |
| Fortinet | W32/Kryptik.HYBW!tr |
| GData | Gen:Variant.Application.Jaik.43056 |
| Detected | |
| Gridinsoft | Trojan.Win32.Amadey.dd!n |
| Ikarus | Trojan.Win32.LummaC |
| K7AntiVirus | Trojan ( 005a60081 ) |
| K7GW | Trojan ( 005a60081 ) |
| Kingsoft | Win32.Hack.Mokes.pef |
| Lionic | Trojan.Win32.Mokes.m!c |
| Malwarebytes | Trojan.Crypt.Generic |
| McAfeeD | Real Protect-LS!E0E62ED285D5 |
| MicroWorld-eScan | Gen:Variant.Application.Jaik.43056 |
| Microsoft | Trojan:Win32/Smokeloader.AIN!MTB |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Sangfor | Backdoor.Win32.Kryptik.V85r |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Troj/Krypt-VK |
| Tencent | Malware.Win32.Gencirc.14ac5fb1 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Artemis!E0E62ED285D5 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VBA32 | Malware-Cryptor.Azorult.gen |
| VIPRE | Gen:Variant.jaik.246690 |
| Varist | W32/ABTrojan.JRRN-1112 |
| VirIT | Trojan.Win32.GenHeur.A |
| Webroot | W32.Trojan.Convagent |
| ZoneAlarm | Troj/Krypt-VK |
| alibabacloud | Backdoor:Win/Smokeloader.ALS2XJC |
| huorong | HEUR:VirTool/Obfuscator.gen!C |
| tehtris | Generic.Malware |