General

  • Target

    2024-04-21_9e47cb1274249e50002191fc5b9e4361_hacktools_icedid_mimikatz

  • Size

    7.8MB

  • MD5

    9e47cb1274249e50002191fc5b9e4361

  • SHA1

    fdb36ea0d3ef0f709984e1bf02646a31da851100

  • SHA256

    c0bb9c32285aa2389baec859677b00dbfdd65727d92a1ee9ced4af0616972c05

  • SHA512

    392682c314e140348c2751b0f93f215f44cb2b6818834fc0f7dd955fd0eee39351ad2362ab8e7f67542dff308f6f20a5010a5b8d2850b6025346550a71fdfd01

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-21_9e47cb1274249e50002191fc5b9e4361_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections