2025-04-04_1723dcc0d62db1d285f07dc5bb430d49_amadey_cloudeye_hacktools_mimikatz_rhadamanthys_smoke-loader
- SHA256 b67e22477883d321a650ae75ae93de6f88ec1bf3e35547d63362f9eac60b01c6
-
Detect Blackmoon payload
-
mimikatz is an open source tool to dump credentials on Windows
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
generic
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=3, id=12, version=7291,
count=8, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=40, id=14, version=7299,
count=174, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=697, id=1, productName=Unmarked objects,
count=43, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=185, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, productName=Unmarked objects (old),
count=28, id=11, productName=VS98 (6.0) build 8168, version=8168,