General

  • Target

    2025-04-22_609a3b33cddb2d39996ea3cb1409629b_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader

  • Size

    10.5MB

  • MD5

    609a3b33cddb2d39996ea3cb1409629b

  • SHA1

    c4449b40b1727a4795216aace77decd57834c8d4

  • SHA256

    399a8159f7487ef5c28e8fb8ad598f78fc5b7874efef013cbee71bb38c5ed301

  • SHA512

    91eb246c42de00a3be826fe4893e89dbd82db84bd373a1c8cf4c52371655891fcb566963f181d06fe731f8aad3633026d496686dbd6fe751aa5a67569e2ba58d

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPb:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0j

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2025-04-22_609a3b33cddb2d39996ea3cb1409629b_amadey_cloudeye_elex_hacktools_mimikatz_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections