General

  • Target

    2024-01-18_481c6bed6cf295946a74235516325d70_hacktools_icedid_mimikatz

  • Size

    12.0MB

  • MD5

    481c6bed6cf295946a74235516325d70

  • SHA1

    e45ce79783f0cfb16f421346c0bef47d412f0803

  • SHA256

    6cfadb13f5a0f04cef781c8d85391e6ae350db54f0fe8e5e8995c946ae81f6e9

  • SHA512

    533723a3868e6b45a53d36edeefc473683a746c746f7d679c13babcca94572e185ec6c9ce03cd8feceaab991b6c37314ced7b5795f4c4d792eda83064839da1e

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-18_481c6bed6cf295946a74235516325d70_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections