General

  • Target

    2025-04-03_e9fad010ceed0ad19f1b9b64f345d266_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.4MB

  • MD5

    e9fad010ceed0ad19f1b9b64f345d266

  • SHA1

    2ddebf9fe2edcb0158959039ffe7bd28983482f1

  • SHA256

    347dff9b3d9d055a24e34430173f5a1aacfbb7f8f4fed219a88abcedc969936d

  • SHA512

    393fe329b2e1053438a9d60621c268e4ca448b85ca2ab35d07978c33e0552756659785b9d423c26aad3484ffdc8e14602b32a76fa7d21a8054d3ff930abf26a2

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPJ:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0B

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_e9fad010ceed0ad19f1b9b64f345d266_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections