Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 16:42
Behavioral task
behavioral1
Sample
2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-25_968555e36b32a99e411bf8da0c2372fc_glassworm_icedid_mimikatz_njrat_vidar.exe
- Size 1.3MB
- Sample260826-t734easfle
- SHA256 b1cc52d418d9c046a0bce15882df692ba9f95f188dd4049c059f3a0b191a4aa5
- MD5 968555e36b32a99e411bf8da0c2372fc
- SHA1 72341635318729b1270bf7b41a5b83de12fc6fe7
- SHA512 3abb930e620d8b9b7faba0d6fc34f0a409e4040fe241379ab4ad23bcfd844fc1689938993db1f363604e2fa4d8edf0f2e927422d8e4d853d58c1be0b0c7f687e
- SSDEEP 24576:nGi0LNiTp3w1bThVzbD9CJ+/vFYC8ZoXX0NZ3T8oIm7J/y:uCpCbHF+Sn0NZpIm7
- TLSH T11F553A51A3E80198F5B79BB5CAB29506DBB378921930C34F02A8CA5F1F73B515E2D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
- mimikatz is an open source tool to dump credentials on Windows 1 IoCs
resource yara_rule behavioral2/memory/1856-0-0x00007FF6EAE10000-0x00007FF6EAF66000-memory.dmp mimikatz - Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
resource yara_rule behavioral2/memory/1856-0-0x00007FF6EAE10000-0x00007FF6EAF66000-memory.dmp INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore