General

  • Target

    2025-04-03_f42ae3f9fdccf9733c26774a9838dd95_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.5MB

  • MD5

    f42ae3f9fdccf9733c26774a9838dd95

  • SHA1

    a73b93c495bc3a63b070054d965815433b751595

  • SHA256

    f8f44c001e5b231be3f8b25a2fadd49f47e7a5613a5122d4ec95f131ab423c9e

  • SHA512

    0b91322c529be9fa1c3c5c137c340a065be51d99f0ae58fc0c68ef2caa5139059de50b614ada52640b7f1fb5786adf61bb17560e519c0eac8db8c82e2093d858

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_f42ae3f9fdccf9733c26774a9838dd95_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections