General

  • Target

    2025-04-03_54f6fe2879d3cf1a29c9c5c8a8dd2c83_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    11.4MB

  • MD5

    54f6fe2879d3cf1a29c9c5c8a8dd2c83

  • SHA1

    a99c4e284060d169e409c8e6fa7c11b97e296d62

  • SHA256

    befc0efd2912518967ed9da0c5563a1d367f5d1ddfde5acb5515daa1f5609b49

  • SHA512

    299a1e1cdc5708d2145233cffe837cc3a6ea9408de0427d017e7c386183434fa952cde3d33de86f895a28edf7160e11c49941e95962597318b9a479ee0ecfa63

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa3:NoeO6XTYxmknGzwHIPHd9swFBubKTi

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_54f6fe2879d3cf1a29c9c5c8a8dd2c83_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections