General

  • Target

    2024-06-28_0d379dfb30934cb32146bf40d7aa6459_hacktools_icedid_mimikatz

  • Size

    8.3MB

  • MD5

    0d379dfb30934cb32146bf40d7aa6459

  • SHA1

    5712e842fcd15e5643e3bb836345ef6b79dfd38b

  • SHA256

    470b00c3d3b7d203ba787d6a497c83ea3dfb7932eef5582434ce305ccd28c311

  • SHA512

    f4c2bbfea0a77e9c243764831d17970dd0d4e85bd42372b123feb553f6541b8b7c7cc0ff3a1a14147d98096acb7fad1dbcc786ec14b2c9ceb0277fa0f391cf3d

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • UPX dump on OEP (original entry point) 1 IoCs
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2024-06-28_0d379dfb30934cb32146bf40d7aa6459_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections