General

  • Target

    2025-04-02_76d530fa025849c612e5c48eb72d79b0_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.3MB

  • MD5

    76d530fa025849c612e5c48eb72d79b0

  • SHA1

    c6c5364deab59d2ba3de3b8f3485404268ce081b

  • SHA256

    30f1a5c79491698eb790d0125630ebe2a3c8827b1d122f85c1a1abc30e27b776

  • SHA512

    64a4ce0a89720f9b5bb1f02de74f638eae195fb891d194a52a1eda79445c9cca2ef0160d415e414a65eb5eba91f886842e573f8765470d0439ce61efc4e501f7

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPY:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0Q

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-02_76d530fa025849c612e5c48eb72d79b0_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections