General

  • Target

    2024-05-31_afff61bb2a9116e683f854e14a87c030_hacktools_icedid_mimikatz

  • Size

    8.0MB

  • MD5

    afff61bb2a9116e683f854e14a87c030

  • SHA1

    86a8b52a628fdbe7ee235cb9497fa40993eec519

  • SHA256

    3a71c870f9dd034cf7c665171386e44caae8c5d9243b442670c76e8446123617

  • SHA512

    b3edb8d9435ae53d5cdfe8a60578e01c63886b5b9d8d369e136a5e1e855cba8c56ca82b12e546c8b0d28b21e208f906e95a7a36fabbd3f9d5bbf6abf07bea808

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-05-31_afff61bb2a9116e683f854e14a87c030_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections