General

  • Target

    2025-04-03_9fa48d38992bdc94ceb334c89d72dd86_amadey_cloudeye_hacktools_icedid_mimikatz_rhadamanthys_smoke-loader

  • Size

    17.8MB

  • MD5

    9fa48d38992bdc94ceb334c89d72dd86

  • SHA1

    b0899fba19c87e009bff6f89e32bafae3d6e0681

  • SHA256

    cf77651324150325d06c03f9176e51b92763fc91b83840a1f81b34946526524c

  • SHA512

    1a3d755c1da555f306b41ff5491fd038e99c5f9f05e374f9fb2b444bf5db330f5adea4559064fd83837f0a44b2a202cd34752adbc2ca2960ee402cd0d5cb84ad

  • SSDEEP

    196608:I6mknGzwHdOgEPHd9BbX/nivPlTXTYrE6mknGzwHdOgEPHd9BbX/nivPlTXTYr:Sjz0EJ7/iv1Vjz0EJ7/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-03_9fa48d38992bdc94ceb334c89d72dd86_amadey_cloudeye_hacktools_icedid_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections