General
- Target infpub.dat
- Size 401KB
- Sample261104-e1d4dahw9j
- SHA256 579fd8a0385482fb4c789561a30b09f25671e86422f40ef5cca2036b28f99648
- MD5 1d724f95c61f1055f0d02c2154bbccd3
- SHA1 79116fe99f2b421c52ef64097f0f39b815b20907
- SHA512 f2d7b018d1516df1c97cfff5507957c75c6d9bf8e2ce52ae0052706f4ec62f13eba6d7be17e6ad2b693fdd58e1fd091c37f17bd2b948cdcd9b95b4ad428c0113
- SSDEEP 12288:GtDjvhNTc/cq4RKZZKfArRuSA80m+/6sXRnfPGp:IjTc/cq4RUZaArbInfPGp
- TLSH T11094129332A00072D1B3893025A57B274FBEF5125CA45DEFA9BB19A51DB07C2BE2534F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
infpub.dll
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
infpub.dll
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target infpub.dat
- Size 401KB
- SHA256 579fd8a0385482fb4c789561a30b09f25671e86422f40ef5cca2036b28f99648
- MD5 1d724f95c61f1055f0d02c2154bbccd3
- SHA1 79116fe99f2b421c52ef64097f0f39b815b20907
- SHA512 f2d7b018d1516df1c97cfff5507957c75c6d9bf8e2ce52ae0052706f4ec62f13eba6d7be17e6ad2b693fdd58e1fd091c37f17bd2b948cdcd9b95b4ad428c0113
- SSDEEP 12288:GtDjvhNTc/cq4RKZZKfArRuSA80m+/6sXRnfPGp:IjTc/cq4RUZaArbInfPGp
- TLSH T11094129332A00072D1B3893025A57B274FBEF5125CA45DEFA9BB19A51DB07C2BE2534F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
mimikatz is an open source tool to dump credentials on Windows
-
Deletes itself
-
Executes dropped EXE