General

  • Target

    sudo.dll

  • Size

    10KB

  • MD5

    65364acf10e1fe72681d89c47cf14c88

  • SHA1

    04821d491a128434828bef3f9ff75c77e8c6a02f

  • SHA256

    fd89b6aecd7efbbb991c15d1313192c7680be4b06f0ebbf2fc223ab1d6144eff

  • SHA512

    677b8738cfd8025317e68ec834b05f62d2910c1272ac0fd48b1b12b779635f34a4922d45ee3299e56dceb515a8e845179c2d6daf76fd6c4317a6d5e257a18929

  • SSDEEP

    96:4Pb5tcAZX8vpdn701NlSQ4rz35JCUSKasPeWtw1zDHaXKGqQdzAlpHFussDJ9hLs:65tcdHn70oyBKxwxwdzAJu1DLhLouH

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sudo.dll
    .dll windows:6 windows x64 arch:x64

    f2ba1d1c78a7d11454a9a14db5a32d93


    Headers

    Imports

    Exports

    Sections