General

  • Target

    2024-05-06_8f6a89a29f4072e066fcd6984ca2a7ac_hacktools_icedid_mimikatz

  • Size

    8.9MB

  • MD5

    8f6a89a29f4072e066fcd6984ca2a7ac

  • SHA1

    cc4a9fd867061263fc651cab96f01c5547f23b21

  • SHA256

    32fd379b4b3ff6f0227b42d85d6e3aede1c668541cd3b9840c5e63bb97f34ae0

  • SHA512

    34ddb77b8f2265cea88bab1bdc5377d41e321b1f4ae72fb0c06d20a4ce0b8ac1bf524938e94d2cfcba9b7272fb0cb7de66c4ad64c4d4698fc0bd9b49ad66b889

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-06_8f6a89a29f4072e066fcd6984ca2a7ac_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections