General

  • Target

    558aa10615469fexeexeexeex.exe

  • Size

    12.8MB

  • MD5

    558aa10615469f1181eed244698a4cfc

  • SHA1

    8b18ae4f157ff10ffa9f1fee24d97d69b24f23c2

  • SHA256

    6ed5e24e0eb1ff504568a61d144b35fe341b39b6db1f6451383539f4eb3ef2c8

  • SHA512

    4fcd7ea4a83ce3e8bea11da7f149c1e6754b31cafe6d47f51f65305e5f5966a5654a8c91b80e086694d4cad00686fa733f404fef3aa4c48012ff44ae7f7248e2

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 558aa10615469fexeexeexeex.exe
    .exe windows x86


    Headers

    Sections