General

  • Target

    2024-05-09_614443e212766faf4b2b861518a492ea_hacktools_icedid_mimikatz

  • Size

    8.7MB

  • MD5

    614443e212766faf4b2b861518a492ea

  • SHA1

    636c7fce69d572e5bb8f74c21bd3224b09f42e1a

  • SHA256

    5b80bc24f9f840735641c1fb3087248598ebf50399998dce38b1e1641777a56a

  • SHA512

    002d894df706a41600bd29a4f3114603f48f117faf2a2080811ed650c88ef3e1e5d38fa95e35acf2cbc9d16f05222b427f7d065f53a9463cb0b68efadaa2b0a5

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-09_614443e212766faf4b2b861518a492ea_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections