mimikatz | dcb00f8f9aa37b7fe469f43d402a4faa135ad471f405e87b90980cc3057d6212

Analysis

max time kernel
140s
max time network
117s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28-12-2024 04:54

Target

dcb00f8f9aa37b7fe469f43d402a4faa135ad471f405e87b90980cc3057d6212.exe
Size

1017KB
MD5

346469d1087ab21412a908c7b656241c
SHA1

d19c493742c8b08a7a9d67b0d237ba03b821f7eb
SHA256

dcb00f8f9aa37b7fe469f43d402a4faa135ad471f405e87b90980cc3057d6212
SHA512

21a16300a3fa91f69e58c1d4e133df162e56ffd528c7e4ac41885fa20f8a2c42988563bed1edd8b30cc1a8097d3b5870fba424d1ce27ca5050295a80eee934d9
SSDEEP

24576:5aZygMFXdJUQsM9+QLeCd+cbsEnK4fwFl3ZST8O2nJJbWFjU:rgMTsMMs1bdfwFl3Ze2nJJbWFjU

Score

10^/10

mimikatz

Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
mimikatz
Mimikatz family
mimikatz

mimikatz is an open source tool to dump credentials on Windows 3 IoCs

resource	yara_rule
behavioral1/memory/2080-0-0x00000000022E0000-0x0000000002430000-memory.dmp	mimikatz
behavioral1/memory/2080-1-0x00000000022E0000-0x0000000002430000-memory.dmp	mimikatz
behavioral1/memory/2080-3-0x00000000022E0000-0x0000000002430000-memory.dmp	mimikatz

C:\Users\Admin\AppData\Local\Temp\dcb00f8f9aa37b7fe469f43d402a4faa135ad471f405e87b90980cc3057d6212.exe
"C:\Users\Admin\AppData\Local\Temp\dcb00f8f9aa37b7fe469f43d402a4faa135ad471f405e87b90980cc3057d6212.exe"
1⤵
PID:2080

memory/2080-0-0x00000000022E0000-0x0000000002430000-memory.dmp

Filesize
1.3MB

Download
memory/2080-1-0x00000000022E0000-0x0000000002430000-memory.dmp

Filesize
1.3MB

Download
memory/2080-2-0x0000000000400000-0x00000000004F3000-memory.dmp

Filesize
972KB

Download
memory/2080-3-0x00000000022E0000-0x0000000002430000-memory.dmp

Filesize
1.3MB

Download