General

  • Target

    2025-04-04_c46b9199ef99f3260adaa86da983ee85_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.3MB

  • MD5

    c46b9199ef99f3260adaa86da983ee85

  • SHA1

    7810fe8ad8492d36113b113b906cf951abe9e05d

  • SHA256

    0bdbf90fa5f5fc9e12e6e899721efdbf242d9e8f1b05a2b1be790a132075e979

  • SHA512

    fbbe80b310db44648f3b0f3e8e1927095da2118ac1587ce0893126a5193d7b56869038ac83361e1ddd326624264c586e541fa86688337b68b9a234a1f36450f5

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-04_c46b9199ef99f3260adaa86da983ee85_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections