General

  • Target

    2025-04-03_6256622175995fdaeda05e8526cdb9f8_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    11.5MB

  • MD5

    6256622175995fdaeda05e8526cdb9f8

  • SHA1

    26c5b42d9f8a1ac0a11edb3a5b8346035f2f35c2

  • SHA256

    8a5e82dc1498f4c118557925be5e490a5c86f83a9852a6eee424e5673070fd17

  • SHA512

    3f0a0ee10bb829055a82abee029d749603e391182b7ea9991ccaf80ce0a3c141bde039333c4ce1b474d132dabbe641592f0519ac3cd6d66b1dd00aedfef088d4

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCaI:NoeO6XTYxmknGzwHIPHd9swFBubKTR

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_6256622175995fdaeda05e8526cdb9f8_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections