General

  • Target

    2024-04-28_b2d6834be9c7634957a1fac5720e918f_hacktools_icedid_mimikatz

  • Size

    14.0MB

  • MD5

    b2d6834be9c7634957a1fac5720e918f

  • SHA1

    37a4e4cb646a954e9b26cb2aa54643de17bee2f4

  • SHA256

    f6b820dee732c82f9238f8c04734acd91909cf62f0afb2c457d180a277d66808

  • SHA512

    2c0217fa38b03f439e33400567323a009be0d539d1f0d571228e5b5fbe24b6112503e41831a2d680777cb41752d3c66dafbc725a7c807d9290affc6830b8cf05

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-04-28_b2d6834be9c7634957a1fac5720e918f_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections