Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 04:49
Behavioral task
behavioral1
Sample
2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-23_9586276aafed5b85d5bfe51aa4deaefa_glassworm_icedid_mimikatz_njrat_vidar.exe
- Size 1.4MB
- Sample260824-ff4zqsyscv
- SHA256 8b03361814a723512ee94d7d61cf8382f020c9255acf3d1e3a2b99da8acead24
- MD5 9586276aafed5b85d5bfe51aa4deaefa
- SHA1 2d70352524583824468b1cbdaa6ba758fc86ae77
- SHA512 92200c64f5c16d7440f2f13099e6995ad5edc6cd1602ef6acc0a1881f9fba67aa2447b809b0f56312d079df8db7e17dedbb5a0a95cec01803650eba6bd16e2f9
- SSDEEP 24576:gh4GctM0vcouF3IAblMqNJrTZyBpNBywcxk0oG/la0Tdaza:00ul/ZyBpNBy0G/
- TLSH T19F652911A7E90098F5B76BB1DEB2A506DBB378921930C38F01A88A5F1F73F515D29732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
- mimikatz is an open source tool to dump credentials on Windows 1 IoCs
resource yara_rule behavioral2/memory/4364-0-0x00007FF7A7580000-0x00007FF7A76E3000-memory.dmp mimikatz - Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
resource yara_rule behavioral2/memory/4364-0-0x00007FF7A7580000-0x00007FF7A76E3000-memory.dmp INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore