General

  • Target

    2024-03-06_01fa180dfdf3d91dbce92f5d78faff08_hacktools_icedid_mimikatz

  • Size

    8.7MB

  • MD5

    01fa180dfdf3d91dbce92f5d78faff08

  • SHA1

    7f32c8bd83848ca2ef642c64c0a8e442f1b1d426

  • SHA256

    ff802494b84d047be0846c4c6aba09c5b64d869e728af55448336a888ca36fd5

  • SHA512

    cd82243d12d6c564b2bd1b2e05e737e7203cf3aac1886382be2f073aea5e170ccf4e6a26e1c7b8e4377536d9cdd6d944e25cb6be2cc59b94ff0d08f26658a0d3

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-06_01fa180dfdf3d91dbce92f5d78faff08_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections