Analysis

  • max time kernel
    6s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    09-02-2025 05:38

General

  • Target

    arsenal-kit/kits/mimikatz/mimikatz-full.x64.dll

  • Size

    794KB

  • MD5

    4731f876ba17d82c40c1eed6f597f01b

  • SHA1

    c725f30a87b933f88dc67be5f6f0ef45f706ed50

  • SHA256

    4d2e1030fd2e16680f6dbfc630f4fd4180df10131fe25d5826f36bae9619a1f3

  • SHA512

    b9739e0909220df5c22be2c4d7c6c96fcec2d961dcb1e8ecbfff6477bd1dfd84b77bb603fb41926bb842e418268912dfe08a44b2759db2a1dcfdab8d54d73739

  • SSDEEP

    12288:t7dTlpmkvMUAbasJU9obUszuhGhF7xYznVemd5vVAobOm:ddTlp5kU3su9ow4KnVhntAqOm

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\arsenal-kit\kits\mimikatz\mimikatz-full.x64.dll,#1
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads