General

  • Target

    2024-05-10_40e363ec519f3052f5fda3b9c6f75398_hacktools_icedid_mimikatz

  • Size

    7.4MB

  • MD5

    40e363ec519f3052f5fda3b9c6f75398

  • SHA1

    fed7c6ff9692a073d2c2233589ca2ef55f598604

  • SHA256

    3c119b572a9975d1178ba21dea961ebeb0554f5ea6eacc5b6acca6d51a0d8359

  • SHA512

    9f5bd87742258e803002e4e7dba225489227afb7fb3a2ff3613ec229452fdb0d8e2d8d9090a158ce9f82b5d46b7a69bb55e560f17cf53bce35e226df40d9ad28

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-10_40e363ec519f3052f5fda3b9c6f75398_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections