General
- Target 2026-08-06_49077b9f67f8b7129584937c10d60bef_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 4.7MB
- Sample260806-ntm75sap2v
- SHA256 81a2cd9cf09872803ef833981d3c9150378ec1f59bf29cebcebd1d7e8ce5726a
- MD5 49077b9f67f8b7129584937c10d60bef
- SHA1 82547b558066c3b7bf4a28e8489f68ef0b74916d
- SHA512 29665d6bd7c68d630dfb921228672ff07a3321ec59cc5d1987861bebe085cd3d600e396203fb8124e0bde9d204df9cbb285f056cec7e0fb61f47d81cbab7d9de
- SSDEEP 98304:O6Gg7YbhVC/Omk6L4YgNnYoT3lkGxma2WiP2UGNJhIPrpilMF9iWs:jGIYuIYgNYobawh3c2hfhIPrpilMF9hs
- TLSH T12236D0827AE50078F0F7C771DEF26467FAB374865830870F1694864A1F73B60D9AA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_49077b9f67f8b7129584937c10d60bef_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_49077b9f67f8b7129584937c10d60bef_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_49077b9f67f8b7129584937c10d60bef_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 4.7MB
- SHA256 81a2cd9cf09872803ef833981d3c9150378ec1f59bf29cebcebd1d7e8ce5726a
- MD5 49077b9f67f8b7129584937c10d60bef
- SHA1 82547b558066c3b7bf4a28e8489f68ef0b74916d
- SHA512 29665d6bd7c68d630dfb921228672ff07a3321ec59cc5d1987861bebe085cd3d600e396203fb8124e0bde9d204df9cbb285f056cec7e0fb61f47d81cbab7d9de
- SSDEEP 98304:O6Gg7YbhVC/Omk6L4YgNnYoT3lkGxma2WiP2UGNJhIPrpilMF9iWs:jGIYuIYgNYobawh3c2hfhIPrpilMF9hs
- TLSH T12236D0827AE50078F0F7C771DEF26467FAB374865830870F1694864A1F73B60D9AA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers