General
- Target 2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar
- Size 1.4MB
- Sample260824-ff4zqsyscv
- SHA256 8b03361814a723512ee94d7d61cf8382f020c9255acf3d1e3a2b99da8acead24
- MD5 9586276aafed5b85d5bfe51aa4deaefa
- SHA1 2d70352524583824468b1cbdaa6ba758fc86ae77
- SHA512 92200c64f5c16d7440f2f13099e6995ad5edc6cd1602ef6acc0a1881f9fba67aa2447b809b0f56312d079df8db7e17dedbb5a0a95cec01803650eba6bd16e2f9
- SSDEEP 24576:gh4GctM0vcouF3IAblMqNJrTZyBpNBywcxk0oG/la0Tdaza:00ul/ZyBpNBy0G/
- TLSH T19F652911A7E90098F5B76BB1DEB2A506DBB378921930C38F01A88A5F1F73F515D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar
- Size 1.4MB
- SHA256 8b03361814a723512ee94d7d61cf8382f020c9255acf3d1e3a2b99da8acead24
- MD5 9586276aafed5b85d5bfe51aa4deaefa
- SHA1 2d70352524583824468b1cbdaa6ba758fc86ae77
- SHA512 92200c64f5c16d7440f2f13099e6995ad5edc6cd1602ef6acc0a1881f9fba67aa2447b809b0f56312d079df8db7e17dedbb5a0a95cec01803650eba6bd16e2f9
- SSDEEP 24576:gh4GctM0vcouF3IAblMqNJrTZyBpNBywcxk0oG/la0Tdaza:00ul/ZyBpNBy0G/
- TLSH T19F652911A7E90098F5B76BB1DEB2A506DBB378921930C38F01A88A5F1F73F515D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers