General
- Target 2026-07-05_707fd41d8cd0a8acd7079a35e0ff174c_mimikatz_qilin_wannacry
- Size 171KB
- Sample260705-3dryqags7t
- SHA256 3cab68d03138307da420bcb8a88bea2c5bfdf0df24ac6988d13918394aa7efb0
- MD5 707fd41d8cd0a8acd7079a35e0ff174c
- SHA1 f967f281068e961842116286a7d8316a9eeee359
- SHA512 c7e36ed5b722725be1458919e8841729d619d3e75094f5a1fc50a35ac315496fed5a7f6977801ec9e46eb36ea4d49a6776caa59d17933c8b1f28ae88e97c5e0e
- SSDEEP 3072:9IVBpV9ROaf8RfGIC5S4plyof8/6wcGm/RfgC0cG0urLl:KVBL9RTf+eIn4TucTYT0urL
- TLSH T1F904F256EFA298D8DA63A2BC3BE197E3A478BC720961145C368443343D4B99C5F3D2C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_707fd41d8cd0a8acd7079a35e0ff174c_mimikatz_qilin_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_707fd41d8cd0a8acd7079a35e0ff174c_mimikatz_qilin_wannacry.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_707fd41d8cd0a8acd7079a35e0ff174c_mimikatz_qilin_wannacry
- Size 171KB
- SHA256 3cab68d03138307da420bcb8a88bea2c5bfdf0df24ac6988d13918394aa7efb0
- MD5 707fd41d8cd0a8acd7079a35e0ff174c
- SHA1 f967f281068e961842116286a7d8316a9eeee359
- SHA512 c7e36ed5b722725be1458919e8841729d619d3e75094f5a1fc50a35ac315496fed5a7f6977801ec9e46eb36ea4d49a6776caa59d17933c8b1f28ae88e97c5e0e
- SSDEEP 3072:9IVBpV9ROaf8RfGIC5S4plyof8/6wcGm/RfgC0cG0urLl:KVBL9RTf+eIn4TucTYT0urL
- TLSH T1F904F256EFA298D8DA63A2BC3BE197E3A478BC720961145C368443343D4B99C5F3D2C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Detects executables containing URLs to raw contents of a Github gist