General

  • Target

    2025-04-02_833611e454c5ab4dd3cda913b7aa8b4e_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.5MB

  • MD5

    833611e454c5ab4dd3cda913b7aa8b4e

  • SHA1

    e5e4ab3502c083af5be2cb967f64bafbc7cdc184

  • SHA256

    bdd29a5e67fb6d013c859c641c0b49b9f37b4975ef7a46efeeecd5ffd5a34a91

  • SHA512

    c80407561b17f42ea6fefbabf963c3be02564b66b7acd77a1d332abe01f7bc5ae381efd5a1ee62bdfef553aa54bfecc109ed00590bdeb77194abe1184e70fbc7

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPO:KnEwl1CPwDv3uFY43v13uFnCPwa/VW02

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_833611e454c5ab4dd3cda913b7aa8b4e_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections