General
- Target 2026-08-02_1373c24eaa401e062234c16b0d938f48_glassworm_hacktools_mimikatz_qilin
- Size 2.6MB
- Sample260802-pcckray1bt
- SHA256 86faf637645f2d6af139d95460add7717da565a8a64bf8c05b7d39406c5c8e6a
- MD5 1373c24eaa401e062234c16b0d938f48
- SHA1 c9f93fdc79d02ccd7bb1ec77bd3bc0becfcaded3
- SHA512 ddc7d51e1a72101f7f6c3eb4e79bd6a5682b4f934a349d0ccafdd266d785e9eafb891077fc7eacd2cf47e2022ecc50d2ffa666e469dd53c3f1149cf301881a86
- SSDEEP 49152:7RaFMjxkHdiNcByXL521gP8TAPbwaNJgfTAAhg3MA+37XI/Pwg:7kFyNcBsN21gbsavg7xhgZE7XI3wg
- TLSH T1CAD54C43F2E228DCD677963486BB93327635B89441319F2F4264DA311E73FC06E6AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_1373c24eaa401e062234c16b0d938f48_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_1373c24eaa401e062234c16b0d938f48_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_1373c24eaa401e062234c16b0d938f48_glassworm_hacktools_mimikatz_qilin
- Size 2.6MB
- SHA256 86faf637645f2d6af139d95460add7717da565a8a64bf8c05b7d39406c5c8e6a
- MD5 1373c24eaa401e062234c16b0d938f48
- SHA1 c9f93fdc79d02ccd7bb1ec77bd3bc0becfcaded3
- SHA512 ddc7d51e1a72101f7f6c3eb4e79bd6a5682b4f934a349d0ccafdd266d785e9eafb891077fc7eacd2cf47e2022ecc50d2ffa666e469dd53c3f1149cf301881a86
- SSDEEP 49152:7RaFMjxkHdiNcByXL521gP8TAPbwaNJgfTAAhg3MA+37XI/Pwg:7kFyNcBsN21gbsavg7xhgZE7XI3wg
- TLSH T1CAD54C43F2E228DCD677963486BB93327635B89441319F2F4264DA311E73FC06E6AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers