General

  • Target

    188a889a33d025641a51f1eda391f280

  • Size

    709KB

  • MD5

    188a889a33d025641a51f1eda391f280

  • SHA1

    43c3e367380405a9cf7733c9a686ffe801ef2b6e

  • SHA256

    d9eb1037596f466c733e8b2a52560417f081d93cd4adcaf6c91906126172439a

  • SHA512

    455c3183ff04d4a8b3879969c04b58caae86fab5d51a351c66e1cd33fae47fb271e94b6c5f8a28627650ea7e2de1c8be90c92f16dea34ceef5c9369a00ea31c1

  • SSDEEP

    12288:HRs3i+AjwwZlllANBzKX2H3MOOCt7aBy5lEBilN1ncSD1LQlHTqK20:xCi+2Rd7y5lqwncSD5sqb0

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 188a889a33d025641a51f1eda391f280
    .dll regsvr32 windows:6 windows x64 arch:x64

    5d332e3a9197d191215d5bbd00369d3c


    Headers

    Imports

    Exports

    Sections