mimikatz | 8e81e89f9717c989f8383c9445988a92246644efd060c2056602f6d1855b2f9a

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
26-10-2024 01:27

Target

8e81e89f9717c989f8383c9445988a92246644efd060c2056602f6d1855b2f9a.exe
Size

2.2MB
MD5

80360f516d298502ba5bc600c6207b64
SHA1

7eb380c13ab289bad6a11cb4d2c1eff9ecfac604
SHA256

8e81e89f9717c989f8383c9445988a92246644efd060c2056602f6d1855b2f9a
SHA512

4ed208986d3fcd33828c766721ad18a8acea822b065fa76106656a81bc0faee8b5275494b60a0555dcaa392ae73ef9755b9141d317b2e9a3e620e7b05f792e7c
SSDEEP

49152:W4/1CsYlw+W7SCaMy8PRUcMeRpuLZo1jFyjFJhmf4YlHWG:WgY2c78pUcMeRpuLmJFFQ

Score

10^/10

mimikatz

Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
mimikatz
Mimikatz family
mimikatz

mimikatz is an open source tool to dump credentials on Windows 3 IoCs

Processes:

resource	yara_rule
behavioral2/memory/1432-1-0x00000186F0FB0000-0x00000186F11F4000-memory.dmp	mimikatz
behavioral2/memory/1432-3-0x00007FF9184C0000-0x00007FF918F81000-memory.dmp	mimikatz
behavioral2/memory/1432-4-0x00007FF9184C0000-0x00007FF918F81000-memory.dmp	mimikatz

C:\Users\Admin\AppData\Local\Temp\8e81e89f9717c989f8383c9445988a92246644efd060c2056602f6d1855b2f9a.exe
"C:\Users\Admin\AppData\Local\Temp\8e81e89f9717c989f8383c9445988a92246644efd060c2056602f6d1855b2f9a.exe"
1⤵
PID:1432

memory/1432-0-0x00007FF9184C3000-0x00007FF9184C5000-memory.dmp

Filesize
8KB

Download
memory/1432-1-0x00000186F0FB0000-0x00000186F11F4000-memory.dmp

Filesize
2.3MB

Download
memory/1432-3-0x00007FF9184C0000-0x00007FF918F81000-memory.dmp

Filesize
10.8MB

Download
memory/1432-4-0x00007FF9184C0000-0x00007FF918F81000-memory.dmp

Filesize
10.8MB

Download