General
- Target 2026-08-15_a2e49af827bbcb2ef47367debac1714b_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 1.3MB
- Sample260815-mwfemsvajg
- SHA256 0d30bf689fd86f4828c0495282dea84e47295c534cd730b56bb2685be8bb74bd
- MD5 a2e49af827bbcb2ef47367debac1714b
- SHA1 32acf1166f0a7852e30cb903a4aea3cb01ab5b45
- SHA512 0cf01d10cdd585b93d55f8489103a40c15fd802f0d0a51ca65dd0c8645c31c1a4cea4ca7dfd3284ce5d80d500c8ecedea24b15c2896efad2f60e8c8205877d5f
- SSDEEP 24576:/CgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODvsv:/CI7XBE2IuF64rIlmdii
- TLSH T11D552941A7E90098F2B79AB59EF29516DBB378D51830C30F02A88A5F1F73F519D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_a2e49af827bbcb2ef47367debac1714b_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_a2e49af827bbcb2ef47367debac1714b_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_a2e49af827bbcb2ef47367debac1714b_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 1.3MB
- SHA256 0d30bf689fd86f4828c0495282dea84e47295c534cd730b56bb2685be8bb74bd
- MD5 a2e49af827bbcb2ef47367debac1714b
- SHA1 32acf1166f0a7852e30cb903a4aea3cb01ab5b45
- SHA512 0cf01d10cdd585b93d55f8489103a40c15fd802f0d0a51ca65dd0c8645c31c1a4cea4ca7dfd3284ce5d80d500c8ecedea24b15c2896efad2f60e8c8205877d5f
- SSDEEP 24576:/CgjBAeu8iuUHGzkuBhzy2F+yVICFPC27rIlve3NuacODvsv:/CI7XBE2IuF64rIlmdii
- TLSH T11D552941A7E90098F2B79AB59EF29516DBB378D51830C30F02A88A5F1F73F519D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers