General

  • Target

    2024-01-18_3ba1c8a9cb5de4069b96ef6ded7f21f0_hacktools_icedid_mimikatz

  • Size

    10.3MB

  • MD5

    3ba1c8a9cb5de4069b96ef6ded7f21f0

  • SHA1

    63b1a68f614853354ad974574f29b745bb1a58a5

  • SHA256

    69fe8d808bc53c1a39e894138c70cef332950f9e8e0d92bf1c52b3522dc9a95f

  • SHA512

    f2519d0106c3af3045261f4d83281fe253da5a37662565904ef716097a0245f0ab446a57c63642527499a27a07f3f31dde9c34b30616ab15ce27a7b8e5af90dd

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-18_3ba1c8a9cb5de4069b96ef6ded7f21f0_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections