General

  • Target

    2024-04-22_49e0c593702afff487b2a9a6db0ef114_hacktools_icedid_mimikatz

  • Size

    7.2MB

  • MD5

    49e0c593702afff487b2a9a6db0ef114

  • SHA1

    316fb86b1ba4a1a7edeb106a2e1888f3649ef0e5

  • SHA256

    6475476b5934e7448e05a0ef8382af5cdd49971b5497a219a3976cc0ec9eff8c

  • SHA512

    d265bd2be536ba6f99abe54d731320e1d9efcc8158054e7637ddfe9ee9fa1fc504214427ca8cfe92e401fc868d5dd6c7ae9d9668b5fef5b2c55a49ed5dc530bf

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-22_49e0c593702afff487b2a9a6db0ef114_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections