General

  • Target

    2024-05-02_9678346907a855cfe9695d5570d4ddf9_hacktools_icedid_mimikatz

  • Size

    8.7MB

  • MD5

    9678346907a855cfe9695d5570d4ddf9

  • SHA1

    7e3aa484eebf37b4bcdb564da6e94febd39c43fd

  • SHA256

    bc6162b3ee8f11c508a68af4013ee3f7280680a797a4f032ceee63cb16eb9683

  • SHA512

    0a26b5b707f3ac3129695533ffdf1b626578ba6d917177f9da9b8685627a843adf53b9eb042b632f302d9105ec646a8b966fcaf3bd5d8833ef5a6f055f839598

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-02_9678346907a855cfe9695d5570d4ddf9_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections