General

  • Target

    2025-04-04_039a9efac0381c0efc332428aef2a048_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    9.8MB

  • MD5

    039a9efac0381c0efc332428aef2a048

  • SHA1

    acb01e3af220bcb27fdd75f704271b16f7b017d5

  • SHA256

    87d73f0819398b80f165cc716bde144e4eb661e1b4a00c44143f6643dc7f880c

  • SHA512

    b99ca321e0fc916e9410224315c14b0fee0c94b99cff960c76aabddbda6a059077e9399bfbf01b5a6d17a423d800807af82a241aaeb90d4c5e61ee3927508293

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-04_039a9efac0381c0efc332428aef2a048_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections