General
- Target 2026-08-23_fea686138f56a260ac06f1a57a06f959_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk
- Size 1.8MB
- Sample260823-rfce9sstfy
- SHA256 4e235e93a907d18a79b59a5f66794fc81b2c444298455946bc7b9f15957414cc
- MD5 fea686138f56a260ac06f1a57a06f959
- SHA1 a095c659e0e09397eb19bfd49e7a03c69e03f725
- SHA512 264ad3ec594d9212c9d7585219f71a8026582678bea67a9bed031e34a60ef6d3dde34e96e7111b9fecfd501244b5e9fb04d04c5e2a8b108d38ffcc5aee166357
- SSDEEP 24576:eJLuE0ye4b03MhJg0vPxlNNufoWs3sH1qg1dy2p/TffSboGHmcUpci4vHDZIcc+t:ecls3E1q8s14slE
- TLSH T17D959212E3B690D8F0B6D5789AB67523BD72389C833497DB8754861B1B32FE0993D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_fea686138f56a260ac06f1a57a06f959_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_fea686138f56a260ac06f1a57a06f959_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_fea686138f56a260ac06f1a57a06f959_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk
- Size 1.8MB
- SHA256 4e235e93a907d18a79b59a5f66794fc81b2c444298455946bc7b9f15957414cc
- MD5 fea686138f56a260ac06f1a57a06f959
- SHA1 a095c659e0e09397eb19bfd49e7a03c69e03f725
- SHA512 264ad3ec594d9212c9d7585219f71a8026582678bea67a9bed031e34a60ef6d3dde34e96e7111b9fecfd501244b5e9fb04d04c5e2a8b108d38ffcc5aee166357
- SSDEEP 24576:eJLuE0ye4b03MhJg0vPxlNNufoWs3sH1qg1dy2p/TffSboGHmcUpci4vHDZIcc+t:ecls3E1q8s14slE
- TLSH T17D959212E3B690D8F0B6D5789AB67523BD72389C833497DB8754861B1B32FE0993D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers