mimikatz | a5e989ea89c4e9e37229278101466586cd938a7a18350e78b360ebe083302057 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
mimikatz-master.zip.7z
Size 1.1MB
Sample240807-11p2jaycre
SHA256 a5e989ea89c4e9e37229278101466586cd938a7a18350e78b360ebe083302057
MD5 4aefed996d36fac064579b0598b8237a
SHA1 5ba935d6ee2447b03d828a7246455940d45ab93c
SHA512 d83dc98c4d537e8555ddb6cacbac7d5027003073b74c271dbff8e6e7c64a29ab88b696f1f78f6bfc040466f8e0045cb0d49435db1c12a77d4beedd49245fcc32
SSDEEP 24576:lN5MltikVflp6+JzinPiZ7t7Zd7MKG1yWHPhz5AImH6kg:bqtiGNQ+Jzm6Z57ZjKZz9s
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

mimikatz discovery linux

Malware Config

Targets

- Target
  mimikatz-master/Win32/mimidrv.sys
- Size 28KB
- SHA256 a0931e16cf7b18d15579e36e0a69edad1717b07527b5407f2c105a2f554224b2
- MD5 49518f7375a5f995ebe9423d8f19cfe4
- SHA1 46c9a474a1a62c25a05bc7661b75a80b471616e6
- SHA512 63236cc2b517552ea4e5c8211b2cba5c36f50d40a01c97488f8234a28bc212cdb83e95d1e829b591ff1cb4d4f3bd79a79a0e32aca7cb73077f80fb6d14a55e7f
- SSDEEP 384:ji91BwAaJmCH6wseck/+5f2AWyzJJ5cF/7fZ+B8YluynVYEH5C+vdUb+se:jiHyA4sLMyNJ5+zfZ+B8YluyVHZC5ise
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

mimikatz
- Mimikatz
  mimikatz is an open source tool to dump credentials on Windows.
  mimikatz
- mimikatz is an open source tool to dump credentials on Windows
behavioral1 behavioral2
- Target
  mimikatz-master/Win32/mimikatz.exe
- Size 971KB
- SHA256 2e8092205a2ded4b07e9d10d0ec02eba0ffcf1d370cab88c5221a749915f678a
- MD5 46f366e3ee36c05ab5a7a319319f7c72
- SHA1 040fbf1325d51358606b710bc3bd774c04bdb308
- SHA512 03e67c8f76a589ad43866396f46af12267e3c9ab2ca0a155f9df0406b4bd77b706e12757222d7c95bfa4b91d6ef073150edb87d11496617a2004e9dc953904e1
- SSDEEP 24576:ZUawjJv4xFV1To1GPC31fILaq/K34UQCxWw:daOxnOB3aLbK3R5Qw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  mimikatz-master/Win32/mimilib.dll
- Size 40KB
- SHA256 2b202a389838e59a7e19bcb8f1280cf339de49d23b37c2ff2028da9924d8ed0d
- MD5 b89fd300420f7f8aa506177cc230a824
- SHA1 03e89ebc0375803e8a2a758bed0ce0c325012e70
- SHA512 5f650c2bba97f04f3ba994eb01f74d3492bcf25d6230c6e576edf8f3cbacb304a28a437a0d3a9dbc51239818c64fc187f171d2afa0a2f068080661398389a2c6
- SSDEEP 768:bhUZHYTw3R3Zeu1b5Oib7ts3sdYemVejdl0SN4FHEhG4FQtEh3:8nikb55b7+8d1IejdlDCHE0CKEh
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  mimikatz-master/Win32/mimilove.exe
- Size 35KB
- SHA256 eac47b3ba3c4a035d4fb8abe0b5531d7f23f1d803b0c784f25cdf68c27520c77
- MD5 5b25c78e900658105bc64f0a31b10656
- SHA1 2ca81716cf60d5debae0ad9a82c8566ab53f19a4
- SHA512 ba6bd33c39523b5ebf20b3a5f2f37544b5a5637c64cc132bb1c162a8682288c1a9c105baf7fe2e581ca22070def5a1a33ad68e8f28c26067abf1a4d021c82eb9
- SSDEEP 768:dZuH7PLxh8+AJtxF0jBuD24aYNNW9gFqF6VGCxBl/qkFSuEh8FxzEh6:juHxsreYa9dnCxBlnSuEg5EY
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  mimikatz-master/debian/rules
- Size 442B
- SHA256 d8813af656e3d3bd27fab484708606fe5edde9bd232c2e3b571adf4a9f0b6348
- MD5 378029c42062c66f603a92d0ecd0db32
- SHA1 050a2023e376897e88ba58f9e8ac068a39a8e6f6
- SHA512 95ec9553bf9eec4ae074af021028c46ea0e715bfb090e827ab7a7e08f414fee6f15ad6eaee5938baa256eeb97bbf05b5f0caf7ef06815b771fa13efef7179fd1
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  mimikatz-master/x64/mimidrv.sys
- Size 35KB
- SHA256 f9b01406864ab081aa77eef4ad15cb2dd2f830d1ef54f52622a59ff1aeb05ba5
- MD5 c8541a9cef64589593e999968a0385b9
- SHA1 fe18c58fbd0a83d67920e037d522c176704d2ca3
- SHA512 faf69095bf6ce18724163fcaaed851dc39949dcd21d4432c4d1734ccfbbe86c3e2bc17fd8c7c9b31b7e62f73e8a183852a358fe07f18570ce3281e2fe7b92bee
- SSDEEP 768:Si4mpA/ZBEAKaCTC/dBm8ipSfJvl1qlCGB8YluQYVHZC5islW:umaEAKEYaJlQlHB8YlhYJwisg
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

mimikatz
- Mimikatz
  mimikatz is an open source tool to dump credentials on Windows.
  mimikatz
- mimikatz is an open source tool to dump credentials on Windows
behavioral13 behavioral14
- Target
  mimikatz-master/x64/mimikatz.exe
- Size 1.2MB
- SHA256 92804faaab2175dc501d73e814663058c78c0a042675a8937266357bcfb96c50
- MD5 e930b05efe23891d19bc354a4209be3e
- SHA1 d1f7832035c3e8a73cc78afd28cfd7f4cece6d20
- SHA512 a7a59176ca275d5d5ea6547108907bbe8ddbf3489308b3d6efe571b685de7e6263d36d6580abe9587a7f77adc22d3b7b164ad42845b6c110b794eaba7ab47ec6
- SSDEEP 24576:zLrEjqXg4NiXcmHVjIhlIyEeQ37uV3Ugmf4Yl0Q0V7FCR:zLZo1jFyjFJhmf4YlHWk
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  mimikatz-master/x64/mimilib.dll
- Size 45KB
- SHA256 7ffce7f6d7262f214d78e6b7fd8d07119835cba4b04ce334260665d7c8fb369a
- MD5 eb05429d25fc57b476428cdb0a134b2f
- SHA1 1c6913248131b5784b923eff1e76a443f738affc
- SHA512 199cbef36efe00121dbc1e5126ee556a72090c5134f157aa48a89d5ab2b0a15116cb059a7387e5d29dd6a4cab2b584494baf32c9b388118107ab9fa53743bb3f
- SSDEEP 768:VWZZrWUCE5KuhECg1kQPbTk/Zm8b4snsFYzltrf0zlejdl0mHFBEhLF3YEhV7K:gP1vgKob4/Zm8bxsFmGlejdl5lBE/IE+
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18