General

  • Target

    2024-05-04_fa30f66cc71678193e16cea8a1dcd029_hacktools_icedid_mimikatz

  • Size

    8.9MB

  • MD5

    fa30f66cc71678193e16cea8a1dcd029

  • SHA1

    cac84a7123169201a37ae08b367f8aad6f8ba16e

  • SHA256

    865ffddc4af5c25f8effcb8bebd4e7a11dc49b483bf22e95dddcaf8eef824e2a

  • SHA512

    f49c1ac0e7be751cc4723b20fbcd1c2dccc656dd346b7f5375bd83427f1286f6aa0a16665a63d55088ebb56dacf20ba044886ad22f0ab69c315dffe4437e5dc9

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-04_fa30f66cc71678193e16cea8a1dcd029_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections