Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
15/04/2024, 16:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c53544778d1ef73e7d5f56c028b66dada6a3471022b89b082dcd02c7e7d36899.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c53544778d1ef73e7d5f56c028b66dada6a3471022b89b082dcd02c7e7d36899.exe
Resource
win10v2004-20240412-en
2 signatures
150 seconds
General
- Target c53544778d1ef73e7d5f56c028b66dada6a3471022b89b082dcd02c7e7d36899.exe
- Size 4.5MB
- Sample240415-tk67jscg6w
- SHA256 c53544778d1ef73e7d5f56c028b66dada6a3471022b89b082dcd02c7e7d36899
- MD5 fe21f59fac94f2577077d9f0b0dbf4ce
- SHA1 49edf734945b785de8fdeb14d15ab33d64870996
- SHA512 cb4e4ea1c42c0650680013f1be97d20656550e4c7faff94fd36fb6c5d9b3eaefbcfdf4754dc51f0d9e50e68f9aaf80c5687871ee30c0e3cc45751c19c7439d80
- SSDEEP 49152:YaEAlgy6ty8OkepwcihoxAyX9Xkx/jFUN2/u5I7cycH:l3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
- mimikatz is an open source tool to dump credentials on Windows 3 IoCs
resource yara_rule behavioral2/memory/2108-1-0x0000024AEB8F0000-0x0000024AEBA24000-memory.dmp mimikatz behavioral2/memory/2108-2-0x0000024AEB8F0000-0x0000024AEBA24000-memory.dmp mimikatz behavioral2/memory/2108-3-0x0000024AEB8F0000-0x0000024AEBA24000-memory.dmp mimikatz