Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    McKatz.exe

  • Size

    590KB

  • MD5

    cb3be917afffb11eb2ba766e96c4bed3

  • SHA1

    b3e84069ca4ec9eb41ba0630d46b4d66ebacf2f3

  • SHA256

    7022048b86f3189691d41e71066fdea319c4f880fc7700943519937ef25106ce

  • SHA512

    06a92405bd784ce3cc0dc439fc378b9dca5cedc55a08d9aca923d9dfd3421b4998c72244402a990dc45deb7c1729d404f20451973ebf13b608a86ec7ee6c61ae

  • SSDEEP

    12288:6wOlen7r4FgrWXt8LolVx/YRwu1WtH+QjWf2/JFY2C:kAYOr0KSVx/yGH+QjWCFY

Score
10/10
upxmimikatz

Malware Config

Signatures

  • Mimikatz family
    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • McKatz.exe
    .exe windows x64


    Headers

    Sections

  • out.upx
    .exe windows x64


    Headers

    Sections