General

  • Target

    2024-02-25_c4a3037409a841a638b666fce0ce2580_hacktools_icedid_mimikatz

  • Size

    8.0MB

  • MD5

    c4a3037409a841a638b666fce0ce2580

  • SHA1

    cfbba612ecbcb53cf8f147e65aa08774c2897224

  • SHA256

    043edf790501c8b3d35b5886527526ef0be8ae8b17e3380b5289c800659817ab

  • SHA512

    e71ed5fe969d37a4c70df4ba6e28cacc212fdefbb2261a6514f501cb2dc8703c1922711fae1f5be3a8c84be63b75598add9bc87a92aedfc3c456f35519d5af8b

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-02-25_c4a3037409a841a638b666fce0ce2580_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections