General

  • Target

    2024-03-13_554bbfd67dd3b2945d26bbe00df15d8e_hacktools_icedid_mimikatz

  • Size

    8.9MB

  • MD5

    554bbfd67dd3b2945d26bbe00df15d8e

  • SHA1

    b88199b2077375fa2678293ba37b6def0b169880

  • SHA256

    05f391b4bbebdcd4786f8a36949ca14c54b8556fd775bb78b75a006b07a74a44

  • SHA512

    697d989e57be85be2f2490bff506c4fcbedc8ff47e40c1e4f13f290715879c17cdcded62d295e1fa89eb661567c91f4f9b3931430e0048747617b6a6ea629e2c

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-13_554bbfd67dd3b2945d26bbe00df15d8e_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections