General

  • Target

    2025-04-03_be9cb2b13f2f7eb93498a7d88c3233ef_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.4MB

  • MD5

    be9cb2b13f2f7eb93498a7d88c3233ef

  • SHA1

    aeff35d03b8174afd4820f7d775e49bdf0cca6ca

  • SHA256

    67abe537077a0b978ca3114a72e9ba4f3673aa79d16440996ee40eaaec0dceeb

  • SHA512

    3932b2bc6bba01b9441d3ac01444f0993aa1dff45d91e4d5e358566846fb26190b0fa24bc65b422f4adfd246e26f813faa7a76cec71cc48f95ed341f6c1532ac

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_be9cb2b13f2f7eb93498a7d88c3233ef_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections