General

  • Target

    6a651991a08f875ff5ca9e149b3f16f582239d830fbe88fc3b59cf2980a0d9bd

  • Size

    123KB

  • MD5

    43cb1f38b0f109970e9b44c539c84944

  • SHA1

    e8eaf43c609879c640da19ec7024972e7076b95c

  • SHA256

    6a651991a08f875ff5ca9e149b3f16f582239d830fbe88fc3b59cf2980a0d9bd

  • SHA512

    c5d5e9320e7c8467048d09027a6d5d88f6cb224cc20f924f26396d7428de130a5d35cebcb53bbfd9aad2e460961978c819bf18a24f88605bcbc43bc45c2c5d68

  • SSDEEP

    3072:KhhBDyg/PHGXSb8irOsqNoTri2P2JLbHfxRukG7Kz5L0aodtq2u/l:KZDygFb8iyh+TrHSLDPrg

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a651991a08f875ff5ca9e149b3f16f582239d830fbe88fc3b59cf2980a0d9bd
    .exe windows x64

    cfa02385b0020234026ce5f257a82900


    Headers

    Imports

    Sections