General

  • Target

    2025-04-02_bf9e544a59a600053bd4471021e2236d_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.5MB

  • MD5

    bf9e544a59a600053bd4471021e2236d

  • SHA1

    672f857a8035c0b8ac66c9474a2d2c81b352f98c

  • SHA256

    1722b0d115f119febafc6ffcf6feec4a297015433482fc732d4aac567911ebe7

  • SHA512

    2f2c024f0e2feb0cea463c00e5e29320d6e61200f41af868e157ab796cd96cd331a24ab226a0f4aecae3493e84bf3e4ba13ed1ba9d31c02dd5e643a8190a9c94

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPG:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0O

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_bf9e544a59a600053bd4471021e2236d_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections