General

  • Target

    2024-03-28_9e64b8b66f72cdea43adf3b4ebda6908_hacktools_icedid_mimikatz

  • Size

    11.3MB

  • MD5

    9e64b8b66f72cdea43adf3b4ebda6908

  • SHA1

    3fd62121bd469b5580b39bd0a1b99c487379e044

  • SHA256

    cb025add529d88ccdc2747e116198e833de90b4ba212048ac134c12c4a863acd

  • SHA512

    44e1a816cf5eece16b67a74a837018ccaf899e91aec453d73497cd2abc4d5ce89872100e726414cbf6fae96dc34ee733641f757b63968fd07253c21fb3d38c96

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-03-28_9e64b8b66f72cdea43adf3b4ebda6908_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections