General
- Target 2026-08-07_83569dadec082d347c3c0a5982a3e158_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 1.2MB
- Sample260807-l43dpssekh
- SHA256 371d11716fc1109fe3d633392d263342620a30e64dcdebd75225cde036623074
- MD5 83569dadec082d347c3c0a5982a3e158
- SHA1 0600088bbd4e7028c7b5f496881cf99d9f9b9c32
- SHA512 c0d1aadd7905965844729a84d4091eec484c4c33827abc5ce43d0a88b8d3e401034ce2cff41ed61012b73a82ca7ebd24b80541d1a710e38748d66503e93f518a
- SSDEEP 24576:lLrEjqXg4NiXcmHVjIhlIyEeQ37uV3Ugmf4Yl0Q0CUNF:lLZo1jFyjFJhmf4YlH8
- TLSH T1A1554A05B7E92068F1B79AB19EF29517DBB378D51434C30F02A88A5B1F73F619929332
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_83569dadec082d347c3c0a5982a3e158_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_83569dadec082d347c3c0a5982a3e158_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 1.2MB
- SHA256 371d11716fc1109fe3d633392d263342620a30e64dcdebd75225cde036623074
- MD5 83569dadec082d347c3c0a5982a3e158
- SHA1 0600088bbd4e7028c7b5f496881cf99d9f9b9c32
- SHA512 c0d1aadd7905965844729a84d4091eec484c4c33827abc5ce43d0a88b8d3e401034ce2cff41ed61012b73a82ca7ebd24b80541d1a710e38748d66503e93f518a
- SSDEEP 24576:lLrEjqXg4NiXcmHVjIhlIyEeQ37uV3Ugmf4Yl0Q0CUNF:lLZo1jFyjFJhmf4YlH8
- TLSH T1A1554A05B7E92068F1B79AB19EF29517DBB378D51434C30F02A88A5B1F73F619929332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)