General
- Target 2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar
- Size 1.3MB
- Sample260826-t734easfle
- SHA256 b1cc52d418d9c046a0bce15882df692ba9f95f188dd4049c059f3a0b191a4aa5
- MD5 968555e36b32a99e411bf8da0c2372fc
- SHA1 72341635318729b1270bf7b41a5b83de12fc6fe7
- SHA512 3abb930e620d8b9b7faba0d6fc34f0a409e4040fe241379ab4ad23bcfd844fc1689938993db1f363604e2fa4d8edf0f2e927422d8e4d853d58c1be0b0c7f687e
- SSDEEP 24576:nGi0LNiTp3w1bThVzbD9CJ+/vFYC8ZoXX0NZ3T8oIm7J/y:uCpCbHF+Sn0NZpIm7
- TLSH T11F553A51A3E80198F5B79BB5CAB29506DBB378921930C34F02A8CA5F1F73B515E2D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar
- Size 1.3MB
- SHA256 b1cc52d418d9c046a0bce15882df692ba9f95f188dd4049c059f3a0b191a4aa5
- MD5 968555e36b32a99e411bf8da0c2372fc
- SHA1 72341635318729b1270bf7b41a5b83de12fc6fe7
- SHA512 3abb930e620d8b9b7faba0d6fc34f0a409e4040fe241379ab4ad23bcfd844fc1689938993db1f363604e2fa4d8edf0f2e927422d8e4d853d58c1be0b0c7f687e
- SSDEEP 24576:nGi0LNiTp3w1bThVzbD9CJ+/vFYC8ZoXX0NZ3T8oIm7J/y:uCpCbHF+Sn0NZpIm7
- TLSH T11F553A51A3E80198F5B79BB5CAB29506DBB378921930C34F02A8CA5F1F73B515E2D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers