General
- Target 2026-08-05_591757fb4ad97601f97087645edcfcb2_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 19.7MB
- Sample260805-k47gzstene
- SHA256 adc6203198b07ad338d61cc80b69e78e7ce664a04d604e718350967924204dab
- MD5 591757fb4ad97601f97087645edcfcb2
- SHA1 01b577c209bad112533816282ff64efaa9c0423f
- SHA512 447c41cf28c4f5673aecad45c4d624a28fba47ea699abf73e8d05240bcc02da9543c2921debdee24cfb5d1f65ecaa7e9c06d6da971c8cdd8add09cc717528d0f
- SSDEEP 393216:kdqapkxqGyMuPfTgExL5Qm9pTBEjiSFuc+qXkHFOaucjFmbHiRL:zaxMuTQcEhF2llucMi
- TLSH T1B827128278D0407CE4A6C671D6965AFEF1A6388A4E758A1F7FC549012F33E50CCBA736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_591757fb4ad97601f97087645edcfcb2_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_591757fb4ad97601f97087645edcfcb2_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_591757fb4ad97601f97087645edcfcb2_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 19.7MB
- SHA256 adc6203198b07ad338d61cc80b69e78e7ce664a04d604e718350967924204dab
- MD5 591757fb4ad97601f97087645edcfcb2
- SHA1 01b577c209bad112533816282ff64efaa9c0423f
- SHA512 447c41cf28c4f5673aecad45c4d624a28fba47ea699abf73e8d05240bcc02da9543c2921debdee24cfb5d1f65ecaa7e9c06d6da971c8cdd8add09cc717528d0f
- SSDEEP 393216:kdqapkxqGyMuPfTgExL5Qm9pTBEjiSFuc+qXkHFOaucjFmbHiRL:zaxMuTQcEhF2llucMi
- TLSH T1B827128278D0407CE4A6C671D6965AFEF1A6388A4E758A1F7FC549012F33E50CCBA736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers