General
- Target 2026-08-23_8083b0f42c8d9cfaaf48be9fd93ac271_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk
- Size 1.8MB
- Sample260824-jfayfadn7x
- SHA256 47e16cd1c017223e0fb6e2a5edaf1ce59197b97af297c3b47094512b90a39962
- MD5 8083b0f42c8d9cfaaf48be9fd93ac271
- SHA1 4abf393df56edafb665449f877515e16acf5d562
- SHA512 0f371b3fd7ec6e21e85751382a11e09e0a4af980b225990be79323fbdf4d7a50f1afcbcde8d1fe8b22cb6e07708e2e88cb1fe02af8953f09803035fd14f9f428
- SSDEEP 24576:rVPRhbB2ywt3qfQCt9iAR+OCD8R/dS7haXnPhTfmsRbCzAZejNrfvbO3p4pZQwXl:rVCpD8ZdS1sFZetSrMFGW6H
- TLSH T13D959212E3B690D8F0B6D5789AB67523BD72389C833497DB47548A1B1B32FE0993D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_8083b0f42c8d9cfaaf48be9fd93ac271_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_8083b0f42c8d9cfaaf48be9fd93ac271_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_8083b0f42c8d9cfaaf48be9fd93ac271_glassworm_hacktools_icedid_mimikatz_njrat_qilin_ryuk
- Size 1.8MB
- SHA256 47e16cd1c017223e0fb6e2a5edaf1ce59197b97af297c3b47094512b90a39962
- MD5 8083b0f42c8d9cfaaf48be9fd93ac271
- SHA1 4abf393df56edafb665449f877515e16acf5d562
- SHA512 0f371b3fd7ec6e21e85751382a11e09e0a4af980b225990be79323fbdf4d7a50f1afcbcde8d1fe8b22cb6e07708e2e88cb1fe02af8953f09803035fd14f9f428
- SSDEEP 24576:rVPRhbB2ywt3qfQCt9iAR+OCD8R/dS7haXnPhTfmsRbCzAZejNrfvbO3p4pZQwXl:rVCpD8ZdS1sFZetSrMFGW6H
- TLSH T13D959212E3B690D8F0B6D5789AB67523BD72389C833497DB47548A1B1B32FE0993D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers