General

  • Target

    d98c2c2b2bb10d2eabc482b7064ec189

  • Size

    1.4MB

  • MD5

    d98c2c2b2bb10d2eabc482b7064ec189

  • SHA1

    56e4a2f93683f0decebc0b2ee797e891a5d48a13

  • SHA256

    1f9d0f135807e609cdca28acb8a285eb638e2617284013ef51cf7fa90a3e4e03

  • SHA512

    ed30048da40c9c170c8a17f0e4e90f52b60e3c4de8c5847a22ed25b260e337a58bf1be26ee28053b57d6ccf673f5caa687aa23cb5038e466124f8e6bbd289bad

  • SSDEEP

    24576:GwtAy91oZnqX7Ebbz8k+0Wnm06DA/2DwfJRJf+F3GW:hro3rKm06DA/7f+

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d98c2c2b2bb10d2eabc482b7064ec189
    .exe windows:5 windows x64 arch:x64

    f3efda99c17a4708c4d400ee2eb2b17d


    Headers

    Imports

    Sections