Analysis

  • max time kernel
    8s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    09-02-2025 05:38

General

  • Target

    arsenal-kit/kits/mimikatz/mimikatz-max.x64.dll

  • Size

    1.4MB

  • MD5

    54dd9c585fee9b75424a1b2fa3584828

  • SHA1

    f9a73c62d2bda9993f986d2cffd032221a2100ac

  • SHA256

    8db53b8aefd68e1bf4dfd3fbf65b71cd636fc25c433e42e9d9fed9ca6866905a

  • SHA512

    466cfd47b99af39fb1b2ad04e052508df563c2742ee4a49e2ac5423d9138d28fc5f07bd7c87e57415345d6fc120f7a81ab7c0bc55a54fa7c0ebcbce61f32d770

  • SSDEEP

    24576:bBgHR3EXWCdNwPvUlw2oXeiqt5hsWNoikNN0:SHsSvU2DXeiqt5WWqa

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\arsenal-kit\kits\mimikatz\mimikatz-max.x64.dll,#1
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads