General

  • Target

    805fc7eca01c3490fa7ce18ac95bff50

  • Size

    708KB

  • MD5

    805fc7eca01c3490fa7ce18ac95bff50

  • SHA1

    1c57554e42aba307e5ccd57f69a0b6cf8c709d77

  • SHA256

    e193c82f9c4d65000f805f3e9272c4ca89f88014b33eed8d347da648a23e4491

  • SHA512

    6828da405a63ff5748f0034b040ca5522cfeeee08709f85077770a7772d1f7356b8ae820aa8b7f1396f8a728764ed27a6ee26950bf827ae6a3eff93bca9a4380

  • SSDEEP

    12288:1lOkS3X2wHZl61ANBrDqPuuDlRUlmY9bTkYqEBRv1xlPUQXfeLi7E+w7OJEtlyeE:XPS3GJDUlhqEBRflPUOWQw7OJvehYZ

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 805fc7eca01c3490fa7ce18ac95bff50
    .dll regsvr32 windows:6 windows x64 arch:x64

    5d332e3a9197d191215d5bbd00369d3c


    Headers

    Imports

    Exports

    Sections