General
- Target mimikatz.exe
- Size 1.3MB
- Sample260710-pfb4dsbt6n
- SHA256 61c0810a23580cf492a6ba4f7654566108331e7a4134c968c2d6a05261b2d8a1
- MD5 29efd64dd3c7fe1e2b022b7ad73a1ba5
- SHA1 e3b6ea8c46fa831cec6f235a5cf48b38a4ae8d69
- SHA512 f00b1ab035aa574c70f6b95b63f676fa75ff8f379f92e85ad5872c358a6bb1ed5417fdd226d421307a48653577ca42aba28103b3b2d7a5c572192d6e5f07e8b3
- SSDEEP 24576:0CgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODvsG:0CI7XBE2IuF64rIlmdii
- TLSH T129552901A7E90098F2B79AB59EF29516DBB378D51834C30F02A88A5F1F73F519D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
mimikatz.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
mimikatz.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target mimikatz.exe
- Size 1.3MB
- SHA256 61c0810a23580cf492a6ba4f7654566108331e7a4134c968c2d6a05261b2d8a1
- MD5 29efd64dd3c7fe1e2b022b7ad73a1ba5
- SHA1 e3b6ea8c46fa831cec6f235a5cf48b38a4ae8d69
- SHA512 f00b1ab035aa574c70f6b95b63f676fa75ff8f379f92e85ad5872c358a6bb1ed5417fdd226d421307a48653577ca42aba28103b3b2d7a5c572192d6e5f07e8b3
- SSDEEP 24576:0CgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODvsG:0CI7XBE2IuF64rIlmdii
- TLSH T129552901A7E90098F2B79AB59EF29516DBB378D51834C30F02A88A5F1F73F519D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.