General

  • Target

    2025-04-02_f449ebb7ff18f762756918595e1698ca_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.6MB

  • MD5

    f449ebb7ff18f762756918595e1698ca

  • SHA1

    d76f3572371f9a8637fdd6c1ea86ecf79e357cc0

  • SHA256

    f57a1f1aa4ff1c6a9123d73137c12078ff764ad802cb682d3a7b82f2b20f75d2

  • SHA512

    c0da5eb18aef3fd815e33867dbcd22d2614b0e472c54a1967a9acc805020be2843c7675be789a06334f7403c1adc32801a82069011c37e58b2a6fc33b83f92b8

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_f449ebb7ff18f762756918595e1698ca_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections