General

  • Target

    2024-05-01_98d490f321ab90bfc3c380b8b6d44b70_hacktools_icedid_mimikatz

  • Size

    7.4MB

  • MD5

    98d490f321ab90bfc3c380b8b6d44b70

  • SHA1

    9dfcd1f7be5f47bc12890e3eb365bd39a8fc453f

  • SHA256

    fe7e52dca5dc93ef49a5270cc15750724b399e64a26887c591fc76f3aabd16f2

  • SHA512

    8be0bd83a26c7c6c98b1c0f2ba8c05dde340a0710256f38ebac0dd2a546db648f67041c2e91804681a8433e13ef5d78200b512cf60116ccf82092dc698283ea7

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-01_98d490f321ab90bfc3c380b8b6d44b70_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections