General

  • Target

    2025-04-04_ca249af48945b4beb5c1d011979ff938_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.3MB

  • MD5

    ca249af48945b4beb5c1d011979ff938

  • SHA1

    8c85fd9483e59ce311d956b5a3d3750e5446a875

  • SHA256

    6455e21e0724b9f09e40f76aa09bc07897c8a361817aa34cc4e39185b232f8ab

  • SHA512

    454344f83300e1efec957bac06a2c353110a6dc7299c8833a7ef8cce24191f245565ee4fcab6e1985e0553080281635176fe733541117a90474d663fb259fa49

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-04_ca249af48945b4beb5c1d011979ff938_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections