General

  • Target

    2024-03-25_ffa0060400503f4786a5730745e99d0f_hacktools_icedid_mimikatz

  • Size

    11.2MB

  • MD5

    ffa0060400503f4786a5730745e99d0f

  • SHA1

    89b8504140f99a5999e9de38cfdd6934f1095bb2

  • SHA256

    23ee940d147684d15dda50a8e46849299c3cf62a0c4431ff0edada147a4f0a61

  • SHA512

    c56f14d7b1789a0b19e8462d746239dea7b40f508e98e828a7211daea7d935611dfee36a838a048f688c9d8d8325840af36ce6c30496dc8439bb1fb18fec069c

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-25_ffa0060400503f4786a5730745e99d0f_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections