General
- Target 2026-08-23_eddf5def3934cda94d5ea12ef99ce4f9_darkgate_elex_glassworm_hacktools_mimikatz_qilin
- Size 1.0MB
- Sample260823-tvsrxas1bw
- SHA256 4100881d8d87f330d3a4f6909e329e31a4fc89748e5df61971325b990a94e9b9
- MD5 eddf5def3934cda94d5ea12ef99ce4f9
- SHA1 76ed053b9dee90c34114e0d951659374e295cdf7
- SHA512 5f5321ad27fde5d6a99385640e9e23fb6d6a0922ec81f9c23b68b624d3c660ce1ad37a106b945fa4dcf612d374a4a961b4b9e3341bec229444452bfd9be121b4
- SSDEEP 24576:+uS0VSrYkTp5VFyI0UZK6zU9T8zPnbJFDhOky0Z:+uS0O59cX2YcPb7DhCM
- TLSH T1EF35295177E64065F5B22AB06EF2A615CE77B9E21831D14F029C464F1FB3A809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_eddf5def3934cda94d5ea12ef99ce4f9_darkgate_elex_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_eddf5def3934cda94d5ea12ef99ce4f9_darkgate_elex_glassworm_hacktools_mimikatz_qilin
- Size 1.0MB
- SHA256 4100881d8d87f330d3a4f6909e329e31a4fc89748e5df61971325b990a94e9b9
- MD5 eddf5def3934cda94d5ea12ef99ce4f9
- SHA1 76ed053b9dee90c34114e0d951659374e295cdf7
- SHA512 5f5321ad27fde5d6a99385640e9e23fb6d6a0922ec81f9c23b68b624d3c660ce1ad37a106b945fa4dcf612d374a4a961b4b9e3341bec229444452bfd9be121b4
- SSDEEP 24576:+uS0VSrYkTp5VFyI0UZK6zU9T8zPnbJFDhOky0Z:+uS0O59cX2YcPb7DhCM
- TLSH T1EF35295177E64065F5B22AB06EF2A615CE77B9E21831D14F029C464F1FB3A809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers