Overview

overview

10

Static

static

10

Win32/mimidrv.sys

windows7-x64

10

Win32/mimidrv.sys

windows10-2004-x64

10

Win32/mimikatz.exe

windows7-x64

3

Win32/mimikatz.exe

windows10-2004-x64

3

Win32/mimilib.dll

windows7-x64

3

Win32/mimilib.dll

windows10-2004-x64

3

Win32/mimilove.exe

windows7-x64

3

Win32/mimilove.exe

windows10-2004-x64

3

Win32/mimispool.dll

windows7-x64

3

Win32/mimispool.dll

windows10-2004-x64

3

x64/mimidrv.sys

windows7-x64

10

x64/mimidrv.sys

windows10-2004-x64

10

x64/mimikatz.exe

windows7-x64

1

x64/mimikatz.exe

windows10-2004-x64

1

x64/mimilib.dll

windows7-x64

1

x64/mimilib.dll

windows10-2004-x64

1

x64/mimispool.dll

windows7-x64

1

x64/mimispool.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mimikatz_trunk.zip

  • Size

    1.2MB

  • MD5

    d2d3e1f8023b12fb89e400c7e8ecd7db

  • SHA1

    4112ef95386ea4d1131be7c600d49a310e9d8f5b

  • SHA256

    7accd179e8a6b2fc907e7e8d087c52a7f48084852724b03d25bebcada1acbca5

  • SHA512

    6b20caba114996bf268d2dc5e857624f7ebad0c580c8054cfc53c5d9af6c7bf56a91f2a68e9a03101e8599c4e1ddd94ad2d37e38d92243d4c2b89370cfee80ad

  • SSDEEP

    24576:YH9iKnN1lvn928lSnigsGXLwVOoEP2qMkKDYLUPMzahK:+X5vn9HlSigsGbwVOoAlRaYLUUr

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz family
    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 6 IoCs
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • mimikatz_trunk.zip
    .zip
  • README.md
  • Win32/mimidrv.sys
    .sys windows:6 windows x86 arch:x86

    25862203800205f80fd8b3a6634ea1c6


    Code Sign

    Headers

    Imports

    Sections

  • Win32/mimikatz.exe
    .exe windows:5 windows x86 arch:x86

    ff6abb25b3369620afef1dacd4a21f4c


    Headers

    Imports

    Sections

  • Win32/mimilib.dll
    .dll windows:5 windows x86 arch:x86

    721f5090ab31a091c5b9778028cc974c


    Headers

    Imports

    Exports

    Sections

  • Win32/mimilove.exe
    .exe windows:5 windows x86 arch:x86

    4e1492696c43305d97c6c6a4e8958cdf


    Headers

    Imports

    Sections

  • Win32/mimispool.dll
    .dll windows:5 windows x86 arch:x86

    3d9268f54e37cd480a12f0595aa6b437


    Headers

    Imports

    Exports

    Sections

  • kiwi_passwords.yar
  • mimicom.idl
  • x64/mimidrv.sys
    .sys windows:6 windows x64 arch:x64

    a63c276e82b09fa57509d7958aa9d208


    Code Sign

    Headers

    Imports

    Sections

  • x64/mimikatz.exe
    .exe windows:5 windows x64 arch:x64

    55ee500bb4bdfc49f27a98ae456d8edf


    Headers

    Imports

    Sections

  • x64/mimilib.dll
    .dll windows:5 windows x64 arch:x64

    eaa79f1d9e8a00542b09cb462d0658ef


    Headers

    Imports

    Exports

    Sections

  • x64/mimispool.dll
    .dll windows:5 windows x64 arch:x64

    c38ebbf4627ca2303746c77210e5a12e


    Headers

    Imports

    Exports

    Sections