Overview

overview

10

Static

static

10

26781d251b...0N.exe

windows7-x64

10

26781d251b...0N.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    102s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-08-2024 14:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    26781d251b8d8e8485654c7c5c411bc0N.exe

  • Size

    1.4MB

  • MD5

    26781d251b8d8e8485654c7c5c411bc0

  • SHA1

    0eb5f8e8d6d2601c17abb72dd140bea6ec52ca9a

  • SHA256

    d306b7ee485f00703883aec130caea065f3111aeeed685db94023c8137eb8c8b

  • SHA512

    10ec1168db6d97f431db18fe5bde3b823e3cad0cd10e30c55f5213d829d09f9e227067e50bd0ab754e7afe928e4ed25a4e662ccb1f3edd873bd4acb214cc7e27

  • SSDEEP

    24576:pgBVy9toZnT31Ebbb8k+0WOikVEap5ldDGMwRJf+9T4pzg:g2oCr3ikVEapXd0f+9U

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz

    mimikatz is an open source tool to dump credentials on Windows.

    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\26781d251b8d8e8485654c7c5c411bc0N.exe
    "C:\Users\Admin\AppData\Local\Temp\26781d251b8d8e8485654c7c5c411bc0N.exe"
    1⤵
      PID:2596

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2596-0-0x00007FF63D610000-0x00007FF63D77A000-memory.dmp

      Filesize

      1.4MB

      Download