General

  • Target

    2024-03-18_1f493161dae25526ee6de9bd9db39eea_hacktools_icedid_mimikatz

  • Size

    13.9MB

  • MD5

    1f493161dae25526ee6de9bd9db39eea

  • SHA1

    2b7013943d899739a3a70d3bbefde6a3bc170e53

  • SHA256

    614df94855c94e9805be2bd6898340e6266df461642a193736f453445d39ab25

  • SHA512

    7cd6aa20b7803b75ff6c52d947d0e4726f6ca04634d372eda8784a7f3edfb0d98e240bbec49e90dbd65139703548a9aa88257c093d363ad3570f75cc3bb688e2

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-18_1f493161dae25526ee6de9bd9db39eea_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections