General
- Target 2026-10-30_120487e8e6542d4daeb952a7b9847926_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 904KB
- Sample261031-kejdvsbz4q
- SHA256 e329b5cf8dd80a60c7ee58b979cf087433519bd3e91bcdaa6ac507d0db11b103
- MD5 120487e8e6542d4daeb952a7b9847926
- SHA1 a2ce8be973232ba9c9c4e620e500884f8aeaeffd
- SHA512 6deec162472f96f88e63bb98ac88c01352fc921b6a0b42243f217f28113d116ba04e7fc01241a94311847905eceec6319d1b09f7a291f5a171e290325d8397d0
- SSDEEP 12288:9uEXBK7Q0DiVp8LcdUtAqZ1jvTr2yhlx37dqPfZsk7iLrSR:9uEXBCQ0DQp95qZ52yX17syk76rc
- TLSH T1C9151951A7E90098F5B79AB59EF19116EBB378D61830C30F02A8C65F2F73B519D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-30_120487e8e6542d4daeb952a7b9847926_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_120487e8e6542d4daeb952a7b9847926_fabookie_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_120487e8e6542d4daeb952a7b9847926_fabookie_glassworm_hacktools_mimikatz_qilin
- Size 904KB
- SHA256 e329b5cf8dd80a60c7ee58b979cf087433519bd3e91bcdaa6ac507d0db11b103
- MD5 120487e8e6542d4daeb952a7b9847926
- SHA1 a2ce8be973232ba9c9c4e620e500884f8aeaeffd
- SHA512 6deec162472f96f88e63bb98ac88c01352fc921b6a0b42243f217f28113d116ba04e7fc01241a94311847905eceec6319d1b09f7a291f5a171e290325d8397d0
- SSDEEP 12288:9uEXBK7Q0DiVp8LcdUtAqZ1jvTr2yhlx37dqPfZsk7iLrSR:9uEXBCQ0DQp95qZ52yX17syk76rc
- TLSH T1C9151951A7E90098F5B79AB59EF19116EBB378D61830C30F02A8C65F2F73B519D29332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers