General

  • Target

    2024-03-25_fef1d6a2bfcafbaf8ce78dc0f28141ed_hacktools_icedid_mimikatz

  • Size

    11.2MB

  • MD5

    fef1d6a2bfcafbaf8ce78dc0f28141ed

  • SHA1

    6b0caeb6e41c35fbc2065f6091ed42f71345b52f

  • SHA256

    d4d19303801e91573d9b9ef8f87ec35112a45aa442c249c3cc64adef84971f34

  • SHA512

    3230026dd9307938b9b32242b099ef60062ecce610b1d86b770af535ca79c475043aa9533ae16a408d325430e27827515913512b03b751b7be4d9e9bb91ba029

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-25_fef1d6a2bfcafbaf8ce78dc0f28141ed_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections