General

  • Target

    A51B45A29E26454F8E09850CC9D3B97A.7z

  • Size

    15.6MB

  • MD5

    d74e2fa470baaf65c46933808ad611d2

  • SHA1

    23c283898e683ffcfc356e63e87da14beb6fce4d

  • SHA256

    aa3cd537d7861eb5d1a5e17bda3259ad11155290c363b6cf7b32819d0b78ba3a

  • SHA512

    9681c9e145560157a387d3408e625a3cf9eb94d9822217a4985eea44fc78d6a24f5e63cf801ad3541f23a0b572fd70f5051a26ad0b89e0e1b3501a1846a70be4

  • SSDEEP

    393216:+Q7zTf+94JR1t3Y89bLFwCDbKDq5Ci7znZ0z9D+:fTfLTx9bLFwLqX0t+

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • Privateloader family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • A51B45A29E26454F8E09850CC9D3B97A.7z
    .7z

    Password: infected

  • A51B45A29E26454F8E09850CC9D3B97A.MAL_decrypted
    .exe windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections