Overview

overview

10

Static

static

10

6474d62fcf...18.exe

windows7-x64

10

6474d62fcf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6474d62fcf22b0ccbce94b6f31ccfd9b397dd9c64757eea34732e6281a86fc18

  • Size

    7.0MB

  • MD5

    7582d3d3aaaafd0f1a878631fb8fcd4e

  • SHA1

    7d5cac5dcd88acc9ffc57109274307a9bb328073

  • SHA256

    6474d62fcf22b0ccbce94b6f31ccfd9b397dd9c64757eea34732e6281a86fc18

  • SHA512

    b45ab6a1e8a95eb7254e9c3ca588e44ed6ddc4d796df5869da3fe79f25118326463ea8e8d064cc4707f5e3e0b9f1dd9bfc4834c1a9576211850b7cdb27ffc1f0

  • SSDEEP

    49152:UJawb+G+PIB6SkKqmr18412qxuPs8xzHfMppZwaYEbKA7KE/n5HzsjcltT25VITj:UTDRP9gr/8DBn5HzKKhoDxp+Qnsh

Score
10/10
themidamimikatz

Malware Config

Signatures

  • Mimikatz family
    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6474d62fcf22b0ccbce94b6f31ccfd9b397dd9c64757eea34732e6281a86fc18
    .exe windows:6 windows x64


    Headers

    Sections