General
- Target 2026-08-23_76747ba656609071449d5a92fd1800c9_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 905KB
- Sample260824-kf35navckh
- SHA256 3740b2bd12d91ef04dd934b49023c25094674077134163e590af38887873c4f9
- MD5 76747ba656609071449d5a92fd1800c9
- SHA1 bbe836c7ebf342f052825847396d83d774299937
- SHA512 316a151a9955cdfa2e5b2d33faec89a3a1f2191244e5a7917ea79a20088802ff707e5c38ea9171d01762126dadd113fc206b76489145fac7a69b32372ae93e86
- SSDEEP 12288:XulOcf0V9D412xvPU/zXaBlWzrXp1URanmlWnD2Rviv8txks:XulOcsV9DK2J2aBcpsam5RviktB
- TLSH T10F151951A7E90098F5B79AB59EF19116EBB378D61830C30F02A8C65F2F73B519D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_76747ba656609071449d5a92fd1800c9_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_76747ba656609071449d5a92fd1800c9_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_76747ba656609071449d5a92fd1800c9_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 905KB
- SHA256 3740b2bd12d91ef04dd934b49023c25094674077134163e590af38887873c4f9
- MD5 76747ba656609071449d5a92fd1800c9
- SHA1 bbe836c7ebf342f052825847396d83d774299937
- SHA512 316a151a9955cdfa2e5b2d33faec89a3a1f2191244e5a7917ea79a20088802ff707e5c38ea9171d01762126dadd113fc206b76489145fac7a69b32372ae93e86
- SSDEEP 12288:XulOcf0V9D412xvPU/zXaBlWzrXp1URanmlWnD2Rviv8txks:XulOcsV9DK2J2aBcpsam5RviktB
- TLSH T10F151951A7E90098F5B79AB59EF19116EBB378D61830C30F02A8C65F2F73B519D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers