General

  • Target

    2024-01-26_df484545295fbc80e5164dfb9f349f0f_hacktools_icedid_mimikatz

  • Size

    8.4MB

  • MD5

    df484545295fbc80e5164dfb9f349f0f

  • SHA1

    846087c4ab018edae04162cb56309d9f0c3ae471

  • SHA256

    e1ed5fd08cc3f970a974fc4b6a485c3e3028e3d4a8453edbc623638b65c51842

  • SHA512

    cc0b815a573a662f496e5e42de17597207feb6cebdc0a5ee502e7ca7ee8015233341e81c3d5dd3164e71d25ff887076fb38d651623a4ffb070ea174c39590a09

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-26_df484545295fbc80e5164dfb9f349f0f_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections