General

  • Target

    2024-01-18_994a1dda85a2606649ad14a8a5ca2a83_hacktools_icedid_mimikatz

  • Size

    8.1MB

  • MD5

    994a1dda85a2606649ad14a8a5ca2a83

  • SHA1

    c4ffa4a4a6b9d7571be748bf524701f7a0e87d7e

  • SHA256

    2334e09bbdba3a24db9c4e469e211b97cc35873f8e379e81073da11214838194

  • SHA512

    e54ce8d9e7ee2437f2d7b2a21b590d44437deaf31db5ef637deb9e5041ed2d772d37fe29c0cdde60114448f8e4439a68763f6a128f59479a814507bca3c6e9df

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-18_994a1dda85a2606649ad14a8a5ca2a83_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections