General

  • Target

    2024-01-28_2b056066e55d32ea4104f61aa0175656_hacktools_icedid_mimikatz

  • Size

    8.2MB

  • MD5

    2b056066e55d32ea4104f61aa0175656

  • SHA1

    07ee5a8f4e90e1b7fd76d8199f322f12a5af130b

  • SHA256

    aecc9685a3ed2e2ee1c56bdc21f3258e3958b273f4c23f042213997ed73df912

  • SHA512

    b8bf23241b0e58539369e144455bf365df4d902ba778cc18a24fef4646692b00894d07e315c019b6575b46ae0d4e5147fe726ef0fcadf5144d56ddcc01c0435a

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-01-28_2b056066e55d32ea4104f61aa0175656_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections