General

  • Target

    2024-02-28_89dc32d0611dcfd3343f13b4a28c5889_hacktools_icedid_mimikatz

  • Size

    9.6MB

  • MD5

    89dc32d0611dcfd3343f13b4a28c5889

  • SHA1

    31286d91c8c7474343deec4e55a734b74d646d8d

  • SHA256

    9e31d9c12d4bcf4a9f770231b98027edc2e6df81e051a38e68deb0692acdff7d

  • SHA512

    8147648a209754fa0eb890472c769aae22ea104d822080a5400e47ed5d6fd048d370f5c5779cb880320a85a868c4afd188c363d6de70bcff9345a14b5e58e236

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-02-28_89dc32d0611dcfd3343f13b4a28c5889_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections