General

  • Target

    224a3f32b7d2a35233d257df32e141ad43e3be915f30fdec1bdb3507ea967473

  • Size

    7.8MB

  • MD5

    1b9c6c103616d1d2995ee12e8e02370c

  • SHA1

    bb5a412d3cdf8e0ea7f42d56cbd437f1dc075bb7

  • SHA256

    224a3f32b7d2a35233d257df32e141ad43e3be915f30fdec1bdb3507ea967473

  • SHA512

    6876f45961b1daa01fd2f8f757ece373279d6708d25e94fd3eb98ae4d19ab5d9eecf7ab9c6ba11b54a0455feda6c81170d53d4cf5e03126f7610af68c718cfe7

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 224a3f32b7d2a35233d257df32e141ad43e3be915f30fdec1bdb3507ea967473
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections