General

  • Target

    2025-04-02_99ed70459d9ede9b1a9d9b904544065c_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.4MB

  • MD5

    99ed70459d9ede9b1a9d9b904544065c

  • SHA1

    b6e6c55a0a3aab7e9138eda6754de103548cc659

  • SHA256

    2e37123c4799716f2a558f0f532271bd811d756bb0a711f374c4e1f8892d42bf

  • SHA512

    deaed848782e2d7c564151006f6d53f3acd24ddffbbc8de2f91a1e3f651b8f45fa809d81c2569b4a858d72a6d8753bca928f32399775918e6cce94128e9aedf8

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPw:KnEwl1CPwDv3uFY43v13uFnCPwa/VW04

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_99ed70459d9ede9b1a9d9b904544065c_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections