General

  • Target

    2025-04-03_f58825d289793cbf09b5e7d7fbd9fa8c_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.3MB

  • MD5

    f58825d289793cbf09b5e7d7fbd9fa8c

  • SHA1

    ef2ad44a658c5c06561ed4c5be61d62bbf0eab28

  • SHA256

    11c800e1902bc4d80010cb546a44ec01e1c15f0b8222b6fa55cfb082d0222d9d

  • SHA512

    9f8506af7524510f647645d18c2a895ec68624c44f0e5c91c597bb939a2502b6fceb9a0f47242e73c81af668f8996a286fd3c266a86d43304b6651b3f540e371

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_f58825d289793cbf09b5e7d7fbd9fa8c_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections