General

  • Target

    2024-02-18_3dd0c3079e23300b679bb9230e83cf97_hacktools_icedid_mimikatz

  • Size

    12.7MB

  • MD5

    3dd0c3079e23300b679bb9230e83cf97

  • SHA1

    b9cc0da403f212a4bb995e0059936146ad06152a

  • SHA256

    556e5294c1d2a56af96d98d75907c10a39302881e7ddc448de9228fc054f29d0

  • SHA512

    be9bb67d2dd0d30215f5d7ea802c6260f2288930e97d119427ca0363371f2d6d655b66d445a3d94c29347f5a5c495085480dfb0ebd7078ccc02c2f43036bc60e

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-02-18_3dd0c3079e23300b679bb9230e83cf97_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections