General

  • Target

    2024-06-23_c3704dbe5b98ddaaf9601e5a43dc50cb_hacktools_icedid_mimikatz

  • Size

    7.2MB

  • MD5

    c3704dbe5b98ddaaf9601e5a43dc50cb

  • SHA1

    7a7e1dc52a2cb36703b9b4c34c76f51c8f74b344

  • SHA256

    9658af10760194f13f9800ba05340ca6b992349e29d25d1ff595ca0102cadab3

  • SHA512

    b9176c8d39bfabb098322425e32f85a66e9b83c7c1c542c1d7198a398a6e2986122e1588c35d7373b0c02ff1b384d2e33a849ac819e07e8668e72cafcab04861

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-06-23_c3704dbe5b98ddaaf9601e5a43dc50cb_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections