General
- Target 2026-07-03_077fb3088bcb38e5544617a666b668c6_fabookie_glassworm_hacktools_mimikatz
- Size 1.3MB
- Sample260703-ngrd2acz7j
- SHA256 8bdef0a9c2c2f5b674215ae822b974a69241970aa004c166a58c46461e10c0d4
- MD5 077fb3088bcb38e5544617a666b668c6
- SHA1 d91e53c32f84b984c563ad1b5b29c39564cacde5
- SHA512 d14ea0062ea4e1582093e909e2e6a347a508eaf14da2237880a1aab03357f15ca2f3d0a0cd4d63ad5810ca64a8387c13d5bbccbb1e2044bed86174f482b67294
- SSDEEP 24576:tCgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODk/k0:tCI7XBE2IuF64rIlmdiik
- TLSH T174552942B7E92058F1B79AB59EF29513DBB378E11834C31F02A8865B1F73F519929332
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-03_077fb3088bcb38e5544617a666b668c6_fabookie_glassworm_hacktools_mimikatz.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_077fb3088bcb38e5544617a666b668c6_fabookie_glassworm_hacktools_mimikatz.exe
Resource
win11ltsc2024-20260630-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_077fb3088bcb38e5544617a666b668c6_fabookie_glassworm_hacktools_mimikatz
- Size 1.3MB
- SHA256 8bdef0a9c2c2f5b674215ae822b974a69241970aa004c166a58c46461e10c0d4
- MD5 077fb3088bcb38e5544617a666b668c6
- SHA1 d91e53c32f84b984c563ad1b5b29c39564cacde5
- SHA512 d14ea0062ea4e1582093e909e2e6a347a508eaf14da2237880a1aab03357f15ca2f3d0a0cd4d63ad5810ca64a8387c13d5bbccbb1e2044bed86174f482b67294
- SSDEEP 24576:tCgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODk/k0:tCI7XBE2IuF64rIlmdiik
- TLSH T174552942B7E92058F1B79AB59EF29513DBB378E11834C31F02A8865B1F73F519929332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)