Overview

overview

10

Static

static

10

Win32/mimidrv.sys

windows7-x64

10

Win32/mimidrv.sys

windows10-2004-x64

10

Win32/mimikatz.exe

windows7-x64

1

Win32/mimikatz.exe

windows10-2004-x64

1

Win32/mimilib.dll

windows7-x64

3

Win32/mimilib.dll

windows10-2004-x64

3

Win32/mimilove.exe

windows7-x64

1

Win32/mimilove.exe

windows10-2004-x64

1

Win32/mimispool.dll

windows7-x64

1

Win32/mimispool.dll

windows10-2004-x64

1

x64/mimidrv.sys

windows7-x64

10

x64/mimidrv.sys

windows10-2004-x64

10

x64/mimikatz.exe

windows7-x64

1

x64/mimikatz.exe

windows10-2004-x64

1

x64/mimilib.dll

windows7-x64

1

x64/mimilib.dll

windows10-2004-x64

1

x64/mimispool.dll

windows7-x64

1

x64/mimispool.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7aaafdf56e6e66296a849d026cb39b0498e26d8f0e3d9f69d3db8b01186505f

  • Size

    1.2MB

  • MD5

    ddff4c5edeb4f3933cec125c283d5527

  • SHA1

    7cf1a25176b4dd30e567334c56b14223a69d5f93

  • SHA256

    e7aaafdf56e6e66296a849d026cb39b0498e26d8f0e3d9f69d3db8b01186505f

  • SHA512

    06aa6d0e5dce0f71da5dd7b7c36d4608d28dd0161d05e025e900963bc299bbe6519bdfea5b9620ad213c105fd1c82f0557736748340d08fa32ce987d255772a1

  • SSDEEP

    24576:RH9iKnN1lvn928lSnigsGXLwVOoEP2qMkKDYLUPMzahn:BX5vn9HlSigsGbwVOoAlRaYLUU6

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz family
    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 6 IoCs
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • e7aaafdf56e6e66296a849d026cb39b0498e26d8f0e3d9f69d3db8b01186505f
    .zip
  • README.md
  • Win32/mimidrv.sys
    .sys windows:6 windows x86 arch:x86

    25862203800205f80fd8b3a6634ea1c6


    Code Sign

    Headers

    Imports

    Sections

  • Win32/mimikatz.exe
    .exe windows:5 windows x86 arch:x86

    ff6abb25b3369620afef1dacd4a21f4c


    Headers

    Imports

    Sections

  • Win32/mimilib.dll
    .dll windows:5 windows x86 arch:x86

    721f5090ab31a091c5b9778028cc974c


    Headers

    Imports

    Exports

    Sections

  • Win32/mimilove.exe
    .exe windows:5 windows x86 arch:x86

    4e1492696c43305d97c6c6a4e8958cdf


    Headers

    Imports

    Sections

  • Win32/mimispool.dll
    .dll windows:5 windows x86 arch:x86

    3d9268f54e37cd480a12f0595aa6b437


    Headers

    Imports

    Exports

    Sections

  • data.txt
  • kiwi_passwords.yar
  • mimicom.idl
  • x64/mimidrv.sys
    .sys windows:6 windows x64 arch:x64

    a63c276e82b09fa57509d7958aa9d208


    Code Sign

    Headers

    Imports

    Sections

  • x64/mimikatz.exe
    .exe windows:5 windows x64 arch:x64

    55ee500bb4bdfc49f27a98ae456d8edf


    Headers

    Imports

    Sections

  • x64/mimilib.dll
    .dll windows:5 windows x64 arch:x64

    eaa79f1d9e8a00542b09cb462d0658ef


    Headers

    Imports

    Exports

    Sections

  • x64/mimispool.dll
    .dll windows:5 windows x64 arch:x64

    c38ebbf4627ca2303746c77210e5a12e


    Headers

    Imports

    Exports

    Sections