General

  • Target

    2024-05-18_73d7acd9cf04d1d8557660c80d72d1c9_hacktools_icedid_mimikatz

  • Size

    7.8MB

  • MD5

    73d7acd9cf04d1d8557660c80d72d1c9

  • SHA1

    a92a73c40073224dce3efd9ab0e8350f82e94476

  • SHA256

    9c8ad0cc5680c1e54dc7fc3b67adae9b8f317e9cac59e6a884e903acc73f1892

  • SHA512

    e5cd6ed2d2e2abc503a43004776d1c5f0ad85017e037249f8709a5a0dba415bd0cc8df4f3aed8030778c8f6b3390c5aa8a472ffb9f5f4cf8df5ea002a1e65350

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-18_73d7acd9cf04d1d8557660c80d72d1c9_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections