General

  • Target

    2024-04-14_150f5484ca080ba6e36ac694d11e7f40_hacktools_icedid_mimikatz

  • Size

    7.1MB

  • MD5

    150f5484ca080ba6e36ac694d11e7f40

  • SHA1

    702d30e0d339721e6929bac60ab6c183b4b3d959

  • SHA256

    c636cdd5c3b2799203d93aec2e3e755cb0c5f5c6510ab866b9023479454aa3b9

  • SHA512

    57e293cd1013b2782890848de8d015553134d1d9e106db28b1473864746f5b28a8a33ae1a152688c39fafc4909317c4bfaf350875a7078e80b8747d24e6f2508

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-14_150f5484ca080ba6e36ac694d11e7f40_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections