Resubmissions

08-08-2024 23:16

240808-284qbssbqk 10

08-08-2024 17:48

240808-wdp1sswgrq 10

General

  • Target

    b186383fab012f0c4ce2d7008de9e8f0256a9b8a60c07052e15eb28629405762

  • Size

    8.7MB

  • MD5

    b127f4c9966806afd564477441b4bc98

  • SHA1

    26ffa799652e426a283910d100759a1284f1d288

  • SHA256

    b186383fab012f0c4ce2d7008de9e8f0256a9b8a60c07052e15eb28629405762

  • SHA512

    d0c67e3a2472197f48b28f6999980614325380db37ffb88181b701107db8f3d979ea14ae764376ea365ebbeb18f72a9fdf59ec68ab5bb62cdfa72d8e13db5725

  • SSDEEP

    196608:MxygkmknGzwHdOgEPHd9BRX/nivPlTXTYo:Y5jz0E51/iv1

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • b186383fab012f0c4ce2d7008de9e8f0256a9b8a60c07052e15eb28629405762
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections