General
- Target 2026-08-23_4c7fc73b0fa19cbb1542762b83fb1437_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 842KB
- Sample260824-pg217ss1hw
- SHA256 ef8a38f055df6a204eaa0c1af0160486880b04e849cf4ae8630d323637f0c8d6
- MD5 4c7fc73b0fa19cbb1542762b83fb1437
- SHA1 f76927bbaf33b49168a989c7e415970813e7e6da
- SHA512 b068c15fa81928372500f45b48564109e2f47b4e6185297c17a0d317525cc139b973ff23749326e4af1c41203d531b595fa6d63d688ebfd3f1722933640a83c9
- SSDEEP 12288:ytiaJqHKjgZKE89gITXzMatDBSg6oYl5QaQNpewMxF0FQ4IP:yti4qHKj6KJLzMfgwl+awMb0CP
- TLSH T14A050A51A3E90098F1B79AB59EF19516EBB378D61930C30F01A8865F3F73B619D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_4c7fc73b0fa19cbb1542762b83fb1437_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_4c7fc73b0fa19cbb1542762b83fb1437_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_4c7fc73b0fa19cbb1542762b83fb1437_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 842KB
- SHA256 ef8a38f055df6a204eaa0c1af0160486880b04e849cf4ae8630d323637f0c8d6
- MD5 4c7fc73b0fa19cbb1542762b83fb1437
- SHA1 f76927bbaf33b49168a989c7e415970813e7e6da
- SHA512 b068c15fa81928372500f45b48564109e2f47b4e6185297c17a0d317525cc139b973ff23749326e4af1c41203d531b595fa6d63d688ebfd3f1722933640a83c9
- SSDEEP 12288:ytiaJqHKjgZKE89gITXzMatDBSg6oYl5QaQNpewMxF0FQ4IP:yti4qHKj6KJLzMfgwl+awMb0CP
- TLSH T14A050A51A3E90098F1B79AB59EF19516EBB378D61930C30F01A8865F3F73B619D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers