General
- Target 2026-11-04_83ae26554074b2a00503950462f66e32_cobalt-strike_glassworm_hacktools_mimikatz_qilin
- Size 2.2MB
- Sample261105-19e8pahf48
- SHA256 4a5499d110b89bdd8cb61a3c12fd37676a03ae75180f29fd40bf9c439a0a464d
- MD5 83ae26554074b2a00503950462f66e32
- SHA1 28b058890c564bcb52e9bedb0f248e5bd3541692
- SHA512 dcbb3e2a075c872281dfcbf0b897c20068b1c4149f1df0f805204278414a567f87a9325247bc94d37ffc2efbb76643860a3c31fc379760f8a5789293f5cbe7a2
- SSDEEP 49152:1vaLyKMXbS2xnN0bx0cl8rm6YZNqg9GuDpkLuBvMUjfbZPH5:a0vRN0bZSYZAg9GuDpkLuBHjfbVH5
- TLSH T1C2B55B11E2D66CDCE9B6877446E7A322B636B4504632DF2F0524DF361F23F806D2AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-04_83ae26554074b2a00503950462f66e32_cobalt-strike_glassworm_hacktools_mimikatz_qilin.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-04_83ae26554074b2a00503950462f66e32_cobalt-strike_glassworm_hacktools_mimikatz_qilin.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-04_83ae26554074b2a00503950462f66e32_cobalt-strike_glassworm_hacktools_mimikatz_qilin
- Size 2.2MB
- SHA256 4a5499d110b89bdd8cb61a3c12fd37676a03ae75180f29fd40bf9c439a0a464d
- MD5 83ae26554074b2a00503950462f66e32
- SHA1 28b058890c564bcb52e9bedb0f248e5bd3541692
- SHA512 dcbb3e2a075c872281dfcbf0b897c20068b1c4149f1df0f805204278414a567f87a9325247bc94d37ffc2efbb76643860a3c31fc379760f8a5789293f5cbe7a2
- SSDEEP 49152:1vaLyKMXbS2xnN0bx0cl8rm6YZNqg9GuDpkLuBvMUjfbZPH5:a0vRN0bZSYZAg9GuDpkLuBHjfbVH5
- TLSH T1C2B55B11E2D66CDCE9B6877446E7A322B636B4504632DF2F0524DF361F23F806D2AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers