General

  • Target

    2024-05-22_4f09f05424d04023ae08ef786758c686_hacktools_icedid_mimikatz

  • Size

    7.7MB

  • MD5

    4f09f05424d04023ae08ef786758c686

  • SHA1

    c01064a85e917fb60dc9e5673a57921eca95faa2

  • SHA256

    70e6f960bfabf9c1de2f859753f0ef3bc2b53637a3d5dc40f5dcf5374d49e659

  • SHA512

    3550988c51a25dbb2fbeeddba5aa8be90e618159598fe4f57cba6d4d45e3ea709f846501c67c9a6a4bf9ed7724c59c0edc736b217cd1363c8a1c3aa73787be42

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-22_4f09f05424d04023ae08ef786758c686_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections