General

  • Target

    2024-03-14_66d6c4f0ca527fdaf46cecd6c5543fe0_hacktools_icedid_mimikatz

  • Size

    8.5MB

  • MD5

    66d6c4f0ca527fdaf46cecd6c5543fe0

  • SHA1

    20a90af75b0a6a8921395452e73d3289a21d448c

  • SHA256

    1c6e73b80354b00686797adb5710cf94d891ebbc03b7a6711fa534c2b32a2648

  • SHA512

    b0bedc33c2e5a793a8261e85145ee1d8ca211c468bf760e429b9c5c2351b28e01cff9e9c6d7634144f4fa7baf24b41f0166f18a177c6e60806155ca731f13506

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-14_66d6c4f0ca527fdaf46cecd6c5543fe0_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections