General

  • Target

    2024-04-17_fb6cf022d6f38a3debe79de109a155db_hacktools_icedid_mimikatz

  • Size

    13.9MB

  • MD5

    fb6cf022d6f38a3debe79de109a155db

  • SHA1

    20f4ad504cb3b9a686fd6e511d550b41ed544e4a

  • SHA256

    9941b615eb9e33d325b718b83c9a6e35e24d7cfb8869bb5624902948fb0f939d

  • SHA512

    93ba331d13994c70488726178db1488bb7324ac439a964cf372a947aca5b91f77cea8abccc0491777eedbfaeba938f4b6907b9b9e59d343bae64f475a344290a

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-17_fb6cf022d6f38a3debe79de109a155db_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections