General

  • Target

    2024-04-18_336b257ac540bde11921df000ce1bb13_hacktools_icedid_mimikatz

  • Size

    7.8MB

  • MD5

    336b257ac540bde11921df000ce1bb13

  • SHA1

    854eb6e9135ae0635c874a8c67ad62f45f88bce0

  • SHA256

    f004e13a4e90520fc2d32e3fbae5b919e94ccc7d7118c0deb058bebdf23487e5

  • SHA512

    473a0d11eb76a8e3de3fa425a64dbc8190dcca4086865805e6d2eda865eea3bd228f8fb6d770b64dd96f11db1a6397d0db7567689c57d8f20ec24fb24527bf1f

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-18_336b257ac540bde11921df000ce1bb13_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections