General

  • Target

    2025-04-04_156940268497c88be844ac064ce63f07_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.2MB

  • MD5

    156940268497c88be844ac064ce63f07

  • SHA1

    12eb81a60dec4b25f8a7dcbdd1dbea7e6ec444ca

  • SHA256

    8fffbd7a225030d378c0f975408f9209f11a639ce2e8ce3df2978d7b5f60ed00

  • SHA512

    f6179e4f51cdfd930d82fa1dbb40e8079680beeb212e2fa2707fe009c6d2af37b7a6e413403e34f784fc932218035a66ce40ae3f12ce551b15915a4b17d66cf0

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-04_156940268497c88be844ac064ce63f07_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections