Overview

overview

10

Static

static

10

sample.tar

windows7-x64

1

sample.tar

windows10-2004-x64

8

arsenal-ki...kit.sh

ubuntu-18.04-amd64

3

arsenal-ki...kit.sh

debian-9-armhf

3

arsenal-ki...kit.sh

debian-9-mips

3

arsenal-ki...kit.sh

debian-9-mipsel

3

arsenal-ki...ild.sh

ubuntu-18.04-amd64

1

arsenal-ki...ild.sh

debian-9-armhf

1

arsenal-ki...ild.sh

debian-9-mips

1

arsenal-ki...ild.sh

debian-9-mipsel

1

arsenal-ki...ild.sh

ubuntu-18.04-amd64

1

arsenal-ki...ild.sh

debian-9-armhf

1

arsenal-ki...ild.sh

debian-9-mips

1

arsenal-ki...ild.sh

debian-9-mipsel

1

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...tor.sh

ubuntu-18.04-amd64

1

arsenal-ki...tor.sh

debian-9-armhf

1

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    09-02-2025 05:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    arsenal-kit/kits/mimikatz/mimikatz-min.x64.dll

  • Size

    305KB

  • MD5

    691d313252b129f6ef9f949cf5aa383d

  • SHA1

    87e28712a05932a194354d583e3829d49c77231c

  • SHA256

    d091deec20b2066fb653f1e5d2473b9359852203e41322daa3d584261822d49d

  • SHA512

    236eedded3e85c1541ce8e766041576908e2db9f1541d982acae688a58dfb262356f27d05f50af3b0526aaa2dcf38c3792943a0c5db2402540a61a237999983e

  • SSDEEP

    3072:LKyp/Enkyg5+yr9E4C7ax49Ovsi9sARHGQJYGJKDQkRbTKEkfaGFAV6IgmG3FNrc:hp/ooIK2h7q4TAAQWnbTSCGFAlfioM

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\arsenal-kit\kits\mimikatz\mimikatz-min.x64.dll,#1
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads