General

  • Target

    2024-05-01_a59bf0c817acd5e557d215d7a51e211e_hacktools_icedid_mimikatz

  • Size

    8.7MB

  • MD5

    a59bf0c817acd5e557d215d7a51e211e

  • SHA1

    a8ad9ef731dc6cdc86115d1971027e0d15d268c1

  • SHA256

    d86cdf9c41a6014be48e3591e52048a874c084ec27b849628fcc72390b2ef540

  • SHA512

    c9586db49a49d9f201ec49f025442a3bd84cf32d3af8ddbee5bedc53629e8f5e2f50d79c364205e4e40e9d8cce425838af9992a91b39f09e9d67264a2e2136be

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-01_a59bf0c817acd5e557d215d7a51e211e_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections