General

  • Target

    2024-01-27_687ef798548469f6f58230c5476cbcf6_hacktools_icedid_mimikatz

  • Size

    8.5MB

  • MD5

    687ef798548469f6f58230c5476cbcf6

  • SHA1

    4305c311833777200377d15c8a1cce635181fe3e

  • SHA256

    cd85f63511f1446c6a3bb3e90604e2b273ade0b4ec994245c65e3db54e72671a

  • SHA512

    63b87fb497fcc6f3d46348c30d1cf1b0a90eb2f19d876e6f9672190b05b0bc5325d04bc6b78ac387e89a3a7a2d7a12386e53a395b140fdc00b0e937edfd713f3

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-27_687ef798548469f6f58230c5476cbcf6_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections