Overview

overview

10

Static

static

10

fscan.exe

windows10-2004-x64

5

fscan.exe

windows11-ltsc_2024-x64

5

mimidrv.sys

windows10-2004-x64

10

mimidrv.sys

windows11-ltsc_2024-x64

10

mimikatz.exe

windows10-2004-x64

1

mimikatz.exe

windows11-ltsc_2024-x64

1

mimilib.dll

windows10-2004-x64

1

mimilib.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tools.zip
  • Size 8.8MB
  • Sample261111-pnymcsfz5q
  • SHA256 f5891d43855e4de7b4ff69cfca9490f433e7e8ad4ce6098fa958b37c86ad7619
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
mimikatzexecutionrevoked_codesignupx

Malware Config

Targets

    • Target
      fscan.exe
    • Size 8.4MB
    • SHA256 34973a25a3d67077fccd687a46bf6ad737ecac7ea6133a5993915901f193114a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      mimidrv.sys
    • Size 36KB
    • SHA256 d30f51bfd62695df96ba94cde14a7fae466b29ef45252c6ad19d57b4a87ff44e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    executionmimikatz

    • Family: Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    behavioral3behavioral4
    • Target
      mimikatz.exe
    • Size 1.3MB
    • SHA256 61c0810a23580cf492a6ba4f7654566108331e7a4134c968c2d6a05261b2d8a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      mimilib.dll
    • Size 36KB
    • SHA256 aef6ce3014add838cf676b57957d630cd2bb15b0c9193cf349bcffecddbc3623
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks