General

  • Target

    2024-02-04_f8d43ab391333de85c45139d7b76677d_hacktools_icedid_mimikatz

  • Size

    12.5MB

  • MD5

    f8d43ab391333de85c45139d7b76677d

  • SHA1

    618382c83592a9d990b440260b8d414efcfaf313

  • SHA256

    0b2c9cf2bba161b5058754a5870b0575fd7cceb01cc301822d3709aa9f372e98

  • SHA512

    a391aa5870c3b06a6fcb7de3f116dc657c03889dcb708dc3ad49e820d16346ea191a5d81c9660ff797639b24d8a77992147df6710539df43454c4181f28eac09

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-02-04_f8d43ab391333de85c45139d7b76677d_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections