General

  • Target

    2025-04-02_423d1987255f7064cda2e41b60f4b95b_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    12.4MB

  • MD5

    423d1987255f7064cda2e41b60f4b95b

  • SHA1

    eaa366d44a965def0c4a79a61745185376945529

  • SHA256

    3e6f4538238d0c3c15b1495e2e7b60976259751cae711d4f3d6feeadaabad708

  • SHA512

    c6557812bdfa459a19fb71693e78f950f009558de0fe5ef37ffeae81ee0a84c2856ed94f83813a33b98a1dd30d7e2b75436aff4a09af0fe1f4fd421fd3bbff9b

  • SSDEEP

    196608:o3XTYQmknGzwHaOtVPHd9swFBubKLtchEYX2AxFpx4g1JoHZiDzDhpyT4t2:4ujzwV3BubKyeapug7ciDzDhpyTv

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_423d1987255f7064cda2e41b60f4b95b_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections