General

  • Target

    2024-03-26_f406698242a7eb2f81d7acf0e273afdf_hacktools_icedid_mimikatz

  • Size

    9.9MB

  • MD5

    f406698242a7eb2f81d7acf0e273afdf

  • SHA1

    fd87dd12c1360ce07d79ea77616f1c40a7bd9a7d

  • SHA256

    a2106550a173f7e0ac30301eb3b988742ba87a6b5fe8c97be4bc30e1245d27e4

  • SHA512

    e5dd87e2b7d6250ef0905379a36ee35519d329435360edf021b971eed8ab99aea2478ee364846c4bd309df950d61bdcad227e7b7c9c52b5f16087e3533f1d46b

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-26_f406698242a7eb2f81d7acf0e273afdf_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections