General

  • Target
    2026-07-08_0c5bb779fdb7c9b92e8670ff70ad91b6_amadey_cloudeye_coinminer_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
  • Size 8.2MB
  • Sample260708-2mpz2sa18y
  • SHA256 297aad3f34ef440d6cc7203c7277b265f5830d8cfa3aeb366b6874759d02e53b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-08_0c5bb779fdb7c9b92e8670ff70ad91b6_amadey_cloudeye_coinminer_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
    • Size 8.2MB
    • SHA256 297aad3f34ef440d6cc7203c7277b265f5830d8cfa3aeb366b6874759d02e53b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

    • mimikatz is an open source tool to dump credentials on Windows

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v16

Tasks