General

  • Target

    240912daxmcsxdklpwinfected.zip

  • Size

    5.2MB

  • MD5

    4284aaec6ade788a7250615036315bf4

  • SHA1

    f2611cc9293f31d50dd0ec76f669875f003c36b3

  • SHA256

    57d9d6ecc1341c9284c4b75aa3be362296c43388f34fe7acc8eb0aa673cfe7aa

  • SHA512

    510ccdb43b4ee1920b1656b0cdd3127eb1deeac4978d9f36e71e58c20cc10fe125bc585a3ebd7e2db157a79c9450e6f33c6b68c653260a885a25ea6298b847ef

  • SSDEEP

    98304:2RSO/PLrumSp3AMS8lEZqMpjWSAxlq2nHXipxHDR5+ui:fO/PLro3AMSWEZzjvAjq2ncHDOui

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 240912daxmcsxdklpwinfected.zip
    .zip

    Password: infected

  • 2024-09-12_8642242fc8dbe8de96ca8d1ce42f493a_hacktools_icedid_mimikatz
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections