General

  • Target

    5575d675a413a2_JC.exe

  • Size

    12.5MB

  • MD5

    5575d675a413a2ae49e93b2add904ce1

  • SHA1

    52b4b0f991b11f3525ffa2b272d64e8246d85e19

  • SHA256

    87106fee4599e84830ca064bfeca5ebe2eb9d8c5d973299b9591cf4899d04bb3

  • SHA512

    14f2ba302531a7a53862b824a44f82f712e080a55e301f64bcfb8dab994acf291f0d40edd8b45d4a10c98bcabfb4e3b992f82149647cf1ce7fb153eac039b611

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 5575d675a413a2_JC.exe
    .exe windows x86


    Headers

    Sections