General

  • Target

    2024-03-08_57bbd537e084e22dcbb8b7f0ea54b4b6_hacktools_icedid_mimikatz

  • Size

    6.9MB

  • MD5

    57bbd537e084e22dcbb8b7f0ea54b4b6

  • SHA1

    3b66b0955cafb6bbd0d8451b4d06b1f042c97db2

  • SHA256

    a57d6d9154feca6755aefd153632b1a081bcff913b214adb76321fa6e9838eb6

  • SHA512

    1d4fcca218d83db9730648fbdf8cb93f5e1a1d6e5fa4d6db41785c21840b0e3afa9ceb1cbaf46bd90255dba21f9ae2e66d852724c5d5ed098f7c2b1172c7d902

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-08_57bbd537e084e22dcbb8b7f0ea54b4b6_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections