mimikatz | 2a3669aebf4e3d0f217e8094cab6d9694fbcdcf53ea4941275cabcece8180fbd | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
30-01-2025 13:32

Sharing

Report Analysis Logs

General

Target

home/maciek/mimikatz/Win32/mimidrv.sys
Size

29KB
MD5

c73e71825adbfb9821b9fa6e8672903c
SHA1

31b827dad64b2dd881b9f0ceb012e0ac6885492c
SHA256

274ca13168b38590c230bddc2d606bbe8c26de8a6d79156a6c7d07265efe0fdf
SHA512

87e79c1b86e75f313694b6b7e782c050efc02bff4fc36d366c53f6ecaabad0e9b5b426354f816386127fd6926bde071f9b06b013901f3cf1d5dbb795f90c4eab
SSDEEP

768:tk0ByYHIVcmA9ytao/fZ+B8zlu7QVHZC5isH:tZyYGA9aLHMB8zl8QJwisH

Score

10^/10

mimikatz

Malware Config

Signatures

Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
mimikatz
Mimikatz family
mimikatz

mimikatz is an open source tool to dump credentials on Windows 1 IoCs

resource	yara_rule
behavioral1/memory/2476-0-0x0000000000010000-0x000000000001B000-memory.dmp	mimikatz

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\home\maciek\mimikatz\Win32\mimidrv.sys
1⤵
PID:2504
- C:\Users\Admin\AppData\Local\Temp\home\maciek\mimikatz\Win32\mimidrv.sys
  C:\Users\Admin\AppData\Local\Temp\home\maciek\mimikatz\Win32\mimidrv.sys
  2⤵
  PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2476-0-0x0000000000010000-0x000000000001B000-memory.dmp

Filesize
44KB

Download