General

  • Target

    2025-04-22_1d4b6bfe11c333de0c18b0d8b9b48fef_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.6MB

  • MD5

    1d4b6bfe11c333de0c18b0d8b9b48fef

  • SHA1

    4489b30f081dfab614a219ca112790a43de3ea59

  • SHA256

    e88eb91e6c782943c876386b33516bbd3cd90f45454de6012a56b81975097f1f

  • SHA512

    14190fee6ebada3a7cd6417e1fd32b0fe1fa19eff5e06cfce3b588c782764c5755ef7de42c8f2a822afc618f5d376be1a768afad3a033b9c2e787ac39619ddf2

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DP6:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0S

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-22_1d4b6bfe11c333de0c18b0d8b9b48fef_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections