General

  • Target

    29dab7bbcdd5eb4248eaac64bc0ef811bee3be6f852075f61259935d9141eb54

  • Size

    7.2MB

  • MD5

    41aa77b688a77ac5476a30088c71f202

  • SHA1

    c01e169ffe3f57de2f3f3893203ebfce05ac5b93

  • SHA256

    29dab7bbcdd5eb4248eaac64bc0ef811bee3be6f852075f61259935d9141eb54

  • SHA512

    c7b8e331a4578824ae9e92067a2ebefa1758702b09d5db87e15908f7ecdc872f2865010573a7734745ac50751010a26ee03a3ec14204822b0066275b60ff3054

  • SSDEEP

    98304:iTDRPn45mP6zULKVTZsDILXyY1KWOCvPcheC:iTDt5Z6NsDILXPKWOCvPy

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29dab7bbcdd5eb4248eaac64bc0ef811bee3be6f852075f61259935d9141eb54
    .exe windows:6 windows x64


    Headers

    Sections