General

  • Target

    04ecf53625f71b777802b64c3e8a504f

  • Size

    707KB

  • MD5

    04ecf53625f71b777802b64c3e8a504f

  • SHA1

    0f0c237c3fd278127bdea2753b59352c7955d4bc

  • SHA256

    4c322949d6edb6773c429cb760c9ca0ee9ee72269263b75997335ce63704f0a2

  • SHA512

    db18a85d8cc8849b3cb7b200b952abf08a9ee5f6eb2e6512b6dac632069210d5855b0c15e1f6e3512fe4bedb11350fd34c4a8cbc09a00c9b7a6529db0b551751

  • SSDEEP

    12288:1LcweNGWIZ5HLFXnAWonr3uM4+nOy1k5tZeuwy43uM4+nKMtn:9deN5upXAWonre+Oy1kQuwy4e+Ztn

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04ecf53625f71b777802b64c3e8a504f
    .dll regsvr32 windows:6 windows x64 arch:x64

    5d332e3a9197d191215d5bbd00369d3c


    Headers

    Imports

    Exports

    Sections