mimikatz | 8fb0ce88b39069c7424c64ab9d30b3b8daa5da9fdb72a52d31f45b494a8eadcd

Sharing

Copy URL

Twitter E-mail

General

Target

9671df266980938313615d140be6ed62_JaffaCakes118
Size

12.1MB
Sample

240814-rnhbgs1gnr
MD5

9671df266980938313615d140be6ed62
SHA1

de5d7a97fede7abfd2de840422305dd69463ef71
SHA256

8fb0ce88b39069c7424c64ab9d30b3b8daa5da9fdb72a52d31f45b494a8eadcd
SHA512

03b116cf2f96b12947fa9cca5daca574e5ba34131ec722e3a4f253036ac741c4b247c7975d9c5cdfbc29ddc01156349bffaa51a6f26b622bd43bf7aab6e44d22
SSDEEP

196608:kmdEO6WoMzFR2Ews0eEHORinOjmHjzYSZZpBqdxSMgtdTmXNTQwjs/8Q2EZsCU3O:QqkdTIin/HbpyqdTmY/81EZsCi

Score

10^/10

mimikatz discovery

Malware Config

Targets

- Target
  
  data/android/meterpreter.jar
- Size
  
  69KB
- MD5
  
  be6b6c312e1cd3422657b50c42ee2bb8
- SHA1
  
  143e9de11e76239b969a9f502bf672a1f4aa0471
- SHA256
  
  cf871d2602251cd48224227afbbab5e701490b486bd3257596ff4cef7a7dfb1d
- SHA512
  
  cfc2d7ccdd7b1beff01a51cc5046bdad241325fe42185e94c3c909c0d1409f63aeac54961759c470def0ada8c208a0f471afc15ba44cc575798d26cc53d45788
- SSDEEP
  
  1536:45EeJnnwGZ67D5udpkip3O4JfKUBtFeoDAs1FI1SYocYB4JCR2Nyeab+:ASD52pOGKUBt4oDAs1q1ShrB4JS2Nyeh
Score

1^/10
behavioral1 behavioral2
- Target
  
  data/android/metstage.jar
- Size
  
  1KB
- MD5
  
  375aa7fae8710112650faa3579674b80
- SHA1
  
  f98a59683a827ad434a4ac7d6d545579c91bda05
- SHA256
  
  edb6178cdd0ad4309c2bc5910ac1a2010213d718211145404ed95b576976fb37
- SHA512
  
  d0bbec297d21393bd66d4c1fd87aa6ffd50abfa010917c4a23ffb0cced628245fcf9d9797186f25c2afaf22078429ded35a2c88c9512413cce9d1efe9998b620
Score

1^/10
behavioral3 behavioral4
- Target
  
  data/android/shell.jar
- Size
  
  1KB
- MD5
  
  8ca9a1ab6b1ea1fad404847b81a52a4a
- SHA1
  
  972c0e05f5c85b2d1dc6b1c7006c3ec05824d69c
- SHA256
  
  7010eef7962d16f6fe8d491cde50604507a2e566d7f5b16101ef6c1e99cc20cc
- SHA512
  
  dbbd9891c52dea252d863c5f4d65240bedeae27639b7dcf68a1ac28153fbe335b8b4a274ca0ce22bd2fa21abe743c183a75c3cd1c160b848fa5d0d1a397c62fa
Score

1^/10
behavioral5 behavioral6
- Target
  
  data/meterpreter/elevator.x64.dll
- Size
  
  89KB
- MD5
  
  ff20de19c78752343ff3f0670da4950c
- SHA1
  
  3871187992eb0fe0fd93c041c30a58b5e953e33c
- SHA256
  
  becb04ccb00a2cb6c796d2601d02471932f5393c350456ff22eca2e1e748fa48
- SHA512
  
  f346d834610b9183323d2fefb09a5ae00f033ee4c60d1d566a8f6be95db686c041c5af75a888dc3ac34c9f1500fed9e768da9b4b12739cd1611f0c61258e8d82
- SSDEEP
  
  1536:4kCfIgAH4TPRcbpf8Ej01Cv7u2FlYz7yv/NXdHY8VwsW4dFnR:4xQnYTybF8Ej01Cv7u2iWv3vFnR
Score

1^/10
behavioral7 behavioral8
- Target
  
  data/meterpreter/elevator.x86.dll
- Size
  
  76KB
- MD5
  
  2e5e3b82622c29bd7cdc12575f28f5b4
- SHA1
  
  f6537a00a2c67874af13d233a20281b25d4a4310
- SHA256
  
  11354eb847398c0445bd4c6471e02a20adb2ea67a98ad94b8bf41c5cf746d722
- SHA512
  
  9c6466f13b59a2b4d690143644e69663f9b4f193dd57c0a1f4e14dc19bf2a80e61da29527e9c4341721be9039c5e1f12430cf6486dd774f711039d93c55cfd47
- SSDEEP
  
  1536:3PcWGte8kE/rdZgP8xCSKewPDknYcs/IHsWjcdKv:3Pcpt3kEHKQnAKv
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  data/meterpreter/ext_server_espia.x64.dll
- Size
  
  195KB
- MD5
  
  b3d00110a7bd4693e2dd6ba5f5a59623
- SHA1
  
  0493e2ceb57ff477276fea1ea817795fecc6dd97
- SHA256
  
  1a7cc8400302950f745ef5980d0047b1aacf52f9671d8b7f08d81b4765421738
- SHA512
  
  fc4a169a0ea384b683bb2d48420e08d286a891f895638711c6a2e612e97225c5f36b22b62ac211be95ac1c4a89f0a33256e15e6e85a89c64b605d7729e768913
- SSDEEP
  
  6144:oS4lggQ4BZrd6T0HTNNKjdJew9VTa4zwlL050bYpKcy:oHS2TNIjDn9YIwK
Score

1^/10
behavioral11 behavioral12
- Target
  
  data/meterpreter/ext_server_espia.x86.dll
- Size
  
  194KB
- MD5
  
  4e2ca3a51d1a4068c6feda09e94197cf
- SHA1
  
  748f6e27a94ae8c4f76454bd29f3cf110dbaa808
- SHA256
  
  7b38fe4797644f66f93a4c9188cd27584c30e17347509059d6e01cc011a9073e
- SHA512
  
  54aab742e04b05aa90bb80467f30ee574629d5f87722f6673ade6a8753acf039f80fa0a1c87d561c87206ba77aeb6d71476068ba5c72db5e2c9f3c285835eae1
- SSDEEP
  
  3072:s4Gell6PHkKYlBAwD/53F9K0FS3VxP2RUO2wMNNNK+Wv:s4Gd2lBAA/53F9K04+aKMQ
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  data/meterpreter/ext_server_extapi.x64.dll
- Size
  
  151KB
- MD5
  
  71824f738e185f67d2fd477375b7243e
- SHA1
  
  486b48fd6074eb9db949fdf3a88124cfee8a9aca
- SHA256
  
  aac25cb83c2d283b12c859400af4f773f8510546e7933668db9f0b43f998cce0
- SHA512
  
  945beb7db304e7337f250e9c05217ec677bdb666f70e0898d94806fa7e39cf238b774bbf2f66c7592faaaa7c774c9120da36191e74df01617c01cc808585cf46
- SSDEEP
  
  3072:CNUrPpk8wLmv2s9TpERBEe0i2zwBW9obFY7DRf:PrPC8wk2wTwEj5sBh6f
Score

1^/10
behavioral15 behavioral16
- Target
  
  data/meterpreter/ext_server_extapi.x86.dll
- Size
  
  124KB
- MD5
  
  713e5a63affc7c68e4a79ad5e8f89300
- SHA1
  
  15da341425e97cee93dab03bbd48aa02a35da181
- SHA256
  
  0ea742e779d415d6a1d28ff06316f9f9f1933e924ffa0219a3a1071e8efa23e6
- SHA512
  
  c913fcae9b9392809f6ef1b75dfb63a5886f6f80d9cf547712a1f18aaa2afe5422e58e9bcc299c38e7836709517040ab03629bcfd36344751146471eeaf2b59e
- SSDEEP
  
  3072:75+D1lSse1NpCWRIPkepk988AZ4+C/1FL0p:CSserpCW88D6
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  data/meterpreter/ext_server_incognito.x64.dll
- Size
  
  107KB
- MD5
  
  09183390eca3592102cf339ac12fdfe4
- SHA1
  
  033030ce69159cef63e15580679f02f239463571
- SHA256
  
  42e4c89df735ed63f8050fe858409f2a3a17967b2b0082ab4f60ceac92e0c52b
- SHA512
  
  8b26b088bf60b90cd58c8f89d11a67f929ea35aa0a003efe17469ae28201e292eca68212226e804a36509ca9d7881cff09d43d52371fa51ff0b853655d90f8a9
- SSDEEP
  
  3072:hCZVufqShTYjlT1Jr4KGZAWdxW51y6Vdlb:8Vu7hTylxJ361+5R
Score

1^/10
behavioral19 behavioral20
- Target
  
  data/meterpreter/ext_server_incognito.x86.dll
- Size
  
  93KB
- MD5
  
  5803f5603b3b23ef9af7a98d6b6a7daf
- SHA1
  
  d5da837203a5b2fecb7f863889002ebde54b319a
- SHA256
  
  b6ac83165beb1450c6ba7fc497cd7319d6b4de4be715eee81947b9277710fc3c
- SHA512
  
  2167378d4fdc29900bb860f5982227ccae18b6589611a46fd6d009bd6deeface1f072243e632d5c204b08f7b34a876504f967538ad6a9d738f54b216bd927aa6
- SSDEEP
  
  1536:/ae5gIyu5Zz/V/dOzpPmtzY4xk+Qjje8iZzPXoLRxnoncdkByejsWjcd8DeRb:/ae59Zjl946VZzPs4TM8aV
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  data/meterpreter/ext_server_kiwi.x64.dll
- Size
  
  1.1MB
- MD5
  
  d7b5f5334abdea9419cb69a1ff5a194b
- SHA1
  
  fd3f30a88ca26f8f591588c01349a93f0e74c63a
- SHA256
  
  2a70cb46fb85f4da4414f0c6211fb8d3ab047a7f4ed35638d7b376ef30eb9c45
- SHA512
  
  82bc1e3089e4f26395b84fe79177c066fafab308d02ee1c34a107d4762533b77715010cad42247ab1be62712196740f8e9c0697daeab9cba4a03bdcb399d75d9
- SSDEEP
  
  12288:kCg1g4Gk+wq91vw4viqm5nUXhvYZ4CqkEl+I0rgZ33hfzszUndVnKqcqqTwV:kTgUik4viqOUXhgLqp+I0sZBbckfnp
Score

1^/10
behavioral23 behavioral24
- Target
  
  data/meterpreter/ext_server_kiwi.x86.dll
- Size
  
  908KB
- MD5
  
  35ec693ae8cd5cecb285fa159ca418cb
- SHA1
  
  f01dda26b2247538a5b5068231870128d0a52720
- SHA256
  
  20682650bd1b5d46cb9c0cfa1be78227d47bbbe504b4103f29c461887eb22fac
- SHA512
  
  848d1c6ad406d23a1b0905a111a7ba61b23b03fd5dbcfdaf30ebe9e99a1149ac34c061c1dde8e0ab91fbc920139a8c56218ca73305e8032c9030ec1651bf9b09
- SSDEEP
  
  24576:Hl8JvU4v7QjXxNuv+W9meLPagwarr2eMA0:HOJvU4v7gBsVmeLPpj+ej
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  data/meterpreter/ext_server_lanattacks.x64.dll
- Size
  
  220KB
- MD5
  
  823f2add6d446c0e6bfcae35ae01b71a
- SHA1
  
  cb65baee6422f38622a624d937ee6afc61ce1a9f
- SHA256
  
  c2fee6d74eb377bc8a6856530abae6187beabc214d0c45c103da1483adb89815
- SHA512
  
  510ae5b425b31f6d5c5ac1f9d64777b7923125cdc5be037cfd89ccaf171ed1731330e738e9bed67fc1f170ec399d05bcae61c940953be4246a293261a0016ebd
- SSDEEP
  
  3072:8EhXT4d1Wwxv+ooXtF/NAT2arOjpCAKhPdS9BW+sf1M696NGaF6:nYvXk2T3OjpCAodSXWp
Score

1^/10
behavioral27 behavioral28
- Target
  
  data/meterpreter/ext_server_lanattacks.x86.dll
- Size
  
  173KB
- MD5
  
  955ab9c110966ff061609315e26b9c2d
- SHA1
  
  cc7704ecba0bc255ad4e30e0ba7eff9ab51860d2
- SHA256
  
  8212fa6de11fa5aca1442f0e45600eaccbd99e78ef4cd49e8ff56a14d85ea63b
- SHA512
  
  2140f0e73d559fffe69c7eb0dd80ea9d18ffb04af4db434d28c1d3fdf5c69648964f52460212dfee626551534c8d264bed5c159e0cc2945647a0f127cae8aef1
- SSDEEP
  
  3072:ihfHE/TM9s9n9vdpiZdNlD1vJwebwp0g51vcnSjX+:0HytdIHDNJUgaX
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  data/meterpreter/ext_server_mimikatz.x64.dll
- Size
  
  528KB
- MD5
  
  6dc538886b4da00472d2aa06b8aa277a
- SHA1
  
  dccfeecef8bf63ae3091ac32368406a8ae0ba8b8
- SHA256
  
  2d1ccf661f08f2dbdf754ca24d7cdf6bbe59b766519de4f1b09d1ded83a25818
- SHA512
  
  ca5e792faf85e81aa32056f8ce4388adf066691964d3c7aac8f0bba8191fd449644167d699d8c7aa941a3d0fb32c71e1d0fad06e8d23ba6dcb729b7c33a39432
- SSDEEP
  
  12288:2nQolfG7VvCiuA+bt0kHYCs0+6skW4UdDSNz0ArRujyplx3yox0e4god:2nQolTskskW4UERMeplx3bod
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32