General
- Target 2026-06-27_047d250c9fa1d749b989ad1e57e72f22_hacktools_mimikatz_qilin
- Size 530KB
- Sample260629-mlrd6aay8v
- SHA256 a498fcd797ffb3bdddcc6f0299a4936d2812f8572fed41aeb548071e1d508b06
- MD5 047d250c9fa1d749b989ad1e57e72f22
- SHA1 2c42ae4c285240b9453ce1cf5b0b1c944822696d
- SHA512 8772af9a663f3e48e99c9cd70244f098b200a3c111cb6b33cefca374687025969fd845758328420c43f7171211f76f8b899a38bff3d1e432127d9904d86dfddd
- SSDEEP 12288:4QKhhikj9dsuQqXmeXr8Zf01Mer4F3452b5s/mfa:5KhikjnsuQqWIr8Zf9e0251
- TLSH T1ACB4238FBE182863E3241D350BC4573159166F4F2AE422FA723866C828EEE71775243F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_047d250c9fa1d749b989ad1e57e72f22_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_047d250c9fa1d749b989ad1e57e72f22_hacktools_mimikatz_qilin
- Size 530KB
- SHA256 a498fcd797ffb3bdddcc6f0299a4936d2812f8572fed41aeb548071e1d508b06
- MD5 047d250c9fa1d749b989ad1e57e72f22
- SHA1 2c42ae4c285240b9453ce1cf5b0b1c944822696d
- SHA512 8772af9a663f3e48e99c9cd70244f098b200a3c111cb6b33cefca374687025969fd845758328420c43f7171211f76f8b899a38bff3d1e432127d9904d86dfddd
- SSDEEP 12288:4QKhhikj9dsuQqXmeXr8Zf01Mer4F3452b5s/mfa:5KhikjnsuQqWIr8Zf9e0251
- TLSH T1ACB4238FBE182863E3241D350BC4573159166F4F2AE422FA723866C828EEE71775243F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)