Overview

overview

10

Static

static

10

2022-10-22...tz.exe

windows7-x64

10

2022-10-22...tz.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2022-10-22_668b61346bcbc37780208b93dbdb25e2_hacktools_icedid_mimikatz

  • Size

    10.2MB

  • Sample

    241004-s9blhasfnn

  • MD5

    668b61346bcbc37780208b93dbdb25e2

  • SHA1

    9d286221d4171631a9e26bade8abfb216a784efa

  • SHA256

    ff2134b2480edf5f1f49e980b352a544b46a4a927382556da944cba0a10fb306

  • SHA512

    735b9b307013723501880de1749c4c2e477a373f52aa59371482cce59398f29af639a9719457a7cacfa172535e7c3be10f66b8dc8e190c4c9db73e4657cca122

  • SSDEEP

    98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

Score
10/10
mimikatzdiscoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      2022-10-22_668b61346bcbc37780208b93dbdb25e2_hacktools_icedid_mimikatz

    • Size

      10.2MB

    • MD5

      668b61346bcbc37780208b93dbdb25e2

    • SHA1

      9d286221d4171631a9e26bade8abfb216a784efa

    • SHA256

      ff2134b2480edf5f1f49e980b352a544b46a4a927382556da944cba0a10fb306

    • SHA512

      735b9b307013723501880de1749c4c2e477a373f52aa59371482cce59398f29af639a9719457a7cacfa172535e7c3be10f66b8dc8e190c4c9db73e4657cca122

    • SSDEEP

      98304:YmBtyYXmknGzZr+HdO5SEPFtmOZ9G1Md5v/nZVnivsAl0eXTBJYa5roSCaa:I6mknGzwHdOgEPHd9BbX/nivPlTXTYr

    Score
    10/10
    mimikatzdiscoverypersistenceprivilege_escalation

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks