General

  • Target

    2025-04-22_af4e9c9f214a3d772b488e564e56c73c_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.7MB

  • MD5

    af4e9c9f214a3d772b488e564e56c73c

  • SHA1

    1380c5214ad493cbd6286d9e7d54326b72e03e11

  • SHA256

    544d864d484e0f3a516fbbfcdff768bcd2d59c241bb09d317a43cd566b2e1107

  • SHA512

    072b9e1d85e205e87305f90a7405bf0a4efac85a5603bb9a770d1f6671e2a6c1aed274a9e821701114ac350ae2091673494b7e07a074427a8574681394445923

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-22_af4e9c9f214a3d772b488e564e56c73c_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections