Analysis

  • max time kernel
    11s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    09-02-2025 05:38

General

  • Target

    arsenal-kit/kits/mimikatz/mimikatz-chrome.x64.dll

  • Size

    755KB

  • MD5

    b7a9fd5f3d601dc82c174f1dafac5799

  • SHA1

    bb9a0a9d7e55956a6d329ceb9c55a6bb9fa8b671

  • SHA256

    a384d3574295d3f2763630a3d6643d6f759d45d4e10deb3a73d76a711145903b

  • SHA512

    7dffc525ab1de207a7ae1528dd0271445e8d747c06edec6b9a330aa5bc4a98556ca89d0caffb1d757d9b25d9da1f7083d46b13971535bb7de44ae9ed9db8d4b8

  • SSDEEP

    12288:6pqa+BSpgo7ttLU5/qlPiHe1euStur4mHC3d3X:6pq7SqoZtg/qFiHqe7M4mO

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\arsenal-kit\kits\mimikatz\mimikatz-chrome.x64.dll,#1
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads