General

  • Target

    2024-05-09_bfa4420613b58fdf25d921c397168c42_hacktools_icedid_mimikatz

  • Size

    8.7MB

  • MD5

    bfa4420613b58fdf25d921c397168c42

  • SHA1

    c1239205214603791aaf4e99a8fc8ba73a294654

  • SHA256

    babe2b5d522788b082584ad2782a2bef576fc456faa80313dcb7c96ea3a0945a

  • SHA512

    69654d1f47475f446899208d034c0133cc9547f42553ad999cb1a0ef396585a3eabb897493adc65c9a2451db7bb7855f1b95121e4211b44ff67154f886fae984

  • SSDEEP

    196608:ylTPemknGzwHdOgEPHd9BYX/nivPlTXTYP:a3jz0E52/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-09_bfa4420613b58fdf25d921c397168c42_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections