Analysis
-
max time kernel
144s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-01-2025 23:19
General
-
Target
mimikatz-master/Win32/mimikatz.exe
-
Size
971KB
-
MD5
46f366e3ee36c05ab5a7a319319f7c72
-
SHA1
040fbf1325d51358606b710bc3bd774c04bdb308
-
SHA256
2e8092205a2ded4b07e9d10d0ec02eba0ffcf1d370cab88c5221a749915f678a
-
SHA512
03e67c8f76a589ad43866396f46af12267e3c9ab2ca0a155f9df0406b4bd77b706e12757222d7c95bfa4b91d6ef073150edb87d11496617a2004e9dc953904e1
-
SSDEEP
24576:ZUawjJv4xFV1To1GPC31fILaq/K34UQCxWw:daOxnOB3aLbK3R5Qw
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\mimikatz-master\Win32\mimikatz.exe"C:\Users\Admin\AppData\Local\Temp\mimikatz-master\Win32\mimikatz.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {c82192ee-6cb5-4bc0-9ef0-fb818773790a} -Embedding1⤵
-
C:\Users\Admin\AppData\Local\Temp\mimikatz-master\Win32\mimikatz.exe"C:\Users\Admin\AppData\Local\Temp\mimikatz-master\Win32\mimikatz.exe"1⤵
- System Location Discovery: System Language Discovery