General

  • Target

    2024-04-14_e5ca25918f1256639487afbc177ce3f9_hacktools_icedid_mimikatz

  • Size

    13.8MB

  • MD5

    e5ca25918f1256639487afbc177ce3f9

  • SHA1

    a0b4f9f096c0a8fe108c5ffa82b3b67faa51e8b7

  • SHA256

    daedef103ce65039296cc0cc3d5c6b562cc25e1d2f81f9dbc8aeb50a1691bb87

  • SHA512

    955577d5c93f1e2a3fa8bbbf41baf98979166c9146adf4be3f1c3c197bd4ddeee647c2c0bfb75a720d8594b7b03d7632cda42bc1f8b2369ccc34ad734debcd7c

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-14_e5ca25918f1256639487afbc177ce3f9_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections