General
-
Target
mimi.exe
-
Size
648KB
-
MD5
58c4f5a84e963e240ade3a32e7895e91
-
SHA1
03ab64db9591177ed4f4f95873336251c0b7fd60
-
SHA256
0462d93a6e7627198db1f39287fbe9300098c08249cee2f874c8d3aa69afc1c1
-
SHA512
82f8cde1c6c7516d91d624ce763a8df5d66b98e0f5be9d7be21bdddecfb81557efc98fca0c01be6ae438ebc4fb42d505877ac22bab3b818b8bee3e4c38c9f4d2
-
SSDEEP
12288:L3HA6hvOf/j5WkkO69sH61UgOIGwNUBWYL59Jzm3QiU4iAY:jA0ab53kO69M2OWgpm3Qyi
Score
10/10
Malware Config
Signatures
-
Mimikatz family
-
mimikatz is an open source tool to dump credentials on Windows 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
mimi.exe
Headers
Sections
-
out.upx
Headers
Sections