General

  • Target

    2024-02-28_aff39d307b0222a21c2054714f37120d_hacktools_icedid_mimikatz

  • Size

    8.2MB

  • MD5

    aff39d307b0222a21c2054714f37120d

  • SHA1

    0435cf6275744e2925b98e47102345cebbd22030

  • SHA256

    11b9459af333a5ad3185b43cac9fa601b0c9920004e63ce5d3577c6cb16573b2

  • SHA512

    80fec9dfc7ed0474beab52d346b43564a835c65cfb36fffaf18d7482db3f30a80c63bf0c0bc553dd879bd3633c8dc08d9b6bc536b604ac7fc0e5217ebee5312a

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-02-28_aff39d307b0222a21c2054714f37120d_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections