General

  • Target

    2024-03-20_fd28221d5a05d829fb65e9a7a649ec30_hacktools_icedid_mimikatz

  • Size

    8.0MB

  • MD5

    fd28221d5a05d829fb65e9a7a649ec30

  • SHA1

    dfb437a960d6b6acd6d4a33dfeb9c2ba8b2215d9

  • SHA256

    f17a6e762924d93693176eeba87f06c4fb395f6c495041e3f5d3b495c17ec4e2

  • SHA512

    7a0dd0403466bb8005e8d7c9a53ba75e8a0ef5d71543e98536848f46b07d5ce0dd5331d7d898231e5f08d1f17d2faa87cc4542ca32c627c8e9299c446eb90bd4

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-20_fd28221d5a05d829fb65e9a7a649ec30_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections