S0002 - Mimikatz

Name: S0002 - Mimikatz
Creator: Maltiverse
Published: 2023-08-14

Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along with many other features that make it useful for testing the security of networks.

Author: agomez
Created: 2023-08-14 15:54:18
Last updated: 2026-02-07 19:00:32
Downloads: 403610
IPv4 indicators: 2
Hostname indicators: 21
URL indicators: 31
Sample indicators: 1165

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

9c0c407ab87b09bf28475fe1053173f7709a6c3640d6bfd246b17d2107fcafb9 Sample

modified 2026-10-18 06:06:05
Mimikatz (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

crestwaybunk.netlify.app Hostname

modified 2026-10-18 04:40:10
Proxy (IPWhois.io) · MimiKatz (ThreatFox Abuse.ch)

http://www.beneaththewaves.net/Downloads/SilverTicketBruteForce-1.0.zip URL

modified 2026-10-18 02:36:53
Mimikatz (Maltiverse Threat Observatory)

v2202501250277308833.bestsrv.de Hostname

modified 2026-10-18 00:35:26
MimiKatz (ThreatFox Abuse.ch)

2026-10-16_266d17f22f6cb2f34a427e314193d7c1_glassworm_hacktools_icedid_mimikatz_njrat_qilin_vidar Sample

modified 2026-10-17 21:31:06
Mimikatz (Triage)

www.beneaththewaves.net Hostname

modified 2026-10-17 20:32:41
Mimikatz (Maltiverse Threat Observatory)

2026-10-16_44239de7ca1be66f2053f94eeb18c5b2_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-17 18:48:47
Mimikatz (Triage)

2026-10-16_4512369a6fd48a1b70bfb92a4656d051_glassworm_hacktools_icedid_mimikatz_njrat_qilin_vidar Sample

modified 2026-10-17 18:43:56
Mimikatz (Triage)

xiaoshihou7.top Hostname

modified 2026-10-17 16:42:46
silverfox (Maltiverse Threat Observatory) · Mimikatz (Maltiverse Threat Observatory)

crm.immunlt.ch Hostname

modified 2026-10-17 16:38:19
MimiKatz (ThreatFox Abuse.ch)

2026-10-16_982ccbaa63b72fc6336008e9ff00b222_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-17 11:22:28
Mimikatz (Triage)

2026-10-16_adab1324bac2071d58a9208ebd86304e_glassworm_hacktools_icedid_mimikatz_njrat_qilin_vidar Sample

modified 2026-10-17 09:23:47
Mimikatz (Triage)

BadRabbit.zip Sample

modified 2026-10-17 08:57:01
Mimikatz (Triage) · Badrabbit (Triage)

2026-10-16_c9b038e4eaed24151cf1026268c9f36c_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-17 06:57:50
Mimikatz (Triage)

2026-10-16_d06ecd979d135269c6a36b5ea2a8d68c_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-17 06:22:47
Mimikatz (Triage)

2026-10-16_da61e9b4e56312e7d2585b2df2140b5a_darkgate_elex_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-17 05:28:13
Mimikatz (Triage)

yunshang.click Hostname

modified 2026-10-17 04:10:50
Mimikatz (Maltiverse Threat Observatory)

2026-09-04_9458661e74a66e7dcc4d35f307f0bf4e_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-17 03:41:46
Mimikatz (Triage)

027cc450ef5f8c5f653329641ec1fed9.exe Sample

modified 2026-10-17 01:57:32
Generic Malware (Hybrid-Analysis) · ransomware,petya,eternalblue,TAG,NotPetya,Petya_NSA_EE_Ransomware,Petna (Maltiverse) · Generic.Malware (Abuse.ch) · MimiKatz (ThreatFox Abuse.ch) · Mimikatz (Triage)

49f07ed2dd74fbcd9faa7960a19483da41287b2bd9f356566aeb8e659cdf2020 Sample

modified 2026-10-17 01:13:57
Mimikatz (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

240c056fa0a024742d65a67a8f494658837dded48bf892f6209750b1265bdf7c Sample

modified 2026-10-17 00:48:13
Generic.Malware (MalwareBazaar Abuse.ch) · MimiKatz (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis)

51.15.59.34.bc.googleusercontent.com Hostname

modified 2026-10-17 00:38:11
MimiKatz (ThreatFox Abuse.ch)

936321318d279f0a3ab45ee7b8c4bc2d484d553ebbe83c812564db380d8662ed Sample

modified 2026-10-16 21:05:48
MimiKatz (Cyber Threat Alliance)

156.65.16.34.bc.googleusercontent.com Hostname

modified 2026-10-16 20:38:17
MimiKatz (ThreatFox Abuse.ch)

66bd0ea512ed49e8e23e7632f8cd593ae83466048773d21dc1487b80fd5ed308 Sample

modified 2026-10-16 20:10:49
MimiKatz (Cyber Threat Alliance)

2026-10-15_2c0d7f937ca3b6b4f9f7a136b2c4aedb_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-16 20:08:49
Mimikatz (Triage)

2026-10-15_314e809d188487a9c34c4dc9a2bb7725_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-16 19:40:09
Mimikatz (Triage)

2026-10-15_55531ed7f9313a1a7f2d10086207e2fd_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-16 16:17:22
Mimikatz (Triage)

2026-10-15_62367e9577c164b9b02f8d43782220a6_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-16 15:02:19
Mimikatz (Triage)

2026-10-15_724c5082892558cef7dd04012eaf33d1_cobalt-strike_glassworm_hacktools_icedid_luca-stealer_mimikatz_njrat_qilin_satacom Sample

modified 2026-10-16 13:26:17
Mimikatz (Triage)

63545fa195488ff51955f09833332b9660d18f8afb16bdf579134661962e548a.zip Sample

modified 2026-10-16 13:20:20
Mimikatz (Triage)

Ransomware.Petrwrap 2.zip Sample

modified 2026-10-16 10:55:25
MimiKatz (ThreatFox Abuse.ch) · Mimikatz (Triage)

2026-10-15_af7a0ec672cc24f9083f75fba0934a3c_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-16 07:46:55
Mimikatz (Triage)

BadRabbit.exe Sample

modified 2026-10-16 02:57:06
BadRabbit (MalwareBazaar Abuse.ch) · Generic.Malware (MalwareBazaar Abuse.ch) · locky,petya,ransomware,BadRabbit (Maltiverse) · MimiKatz (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis)

2026-10-15_dc8af18ca69438a78b736058b947d561_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-16 02:26:12
Mimikatz (Triage)

http://falconsplayingpoker.com/allyourbase/Falconkatz.ps1 URL

modified 2026-10-15 13:46:44
Mimikatz (Maltiverse Threat Observatory)

falconsplayingpoker.com Hostname

modified 2026-10-15 13:46:44
Mimikatz (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

master.exe Sample

modified 2026-10-15 12:59:12
Gen:Application.Mimikatz (Hybrid-Analysis) · Generic Malware (Hybrid-Analysis) · MimiKatz (ThreatFox Abuse.ch) · Mimikatz (Triage)

46c447852825f49b87f2334633d5d4473248184424a1ccb85f5eee9483182689 Sample

modified 2026-10-15 03:13:42
Mimikatz (Triage)

92.127.156.174 IPv4

modified 2026-10-14 21:32:13
Malicious Host (HoneyDB) · Brute force attack on the email service of the server Storage3 (Blocklist.net.ua) · Malware Download (URLhaus Abuse.ch) · Hacktool.generic (Maltiverse Threat Observatory) · Mimikatz (Maltiverse Threat Observatory)

bazaar.abuse.ch Hostname

modified 2026-10-14 15:58:19
Generic.Malware (Hybrid-Analysis) · Malware (Hybrid-Analysis) · Safe site (Maltiverse Research Team) · Covid19 scam (CCN-CERT) · Top Popularity Site (Cisco Umbrella)

2026-10-14_cdde64268718e754932d0e449be8de83_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-14 11:49:22
Mimikatz (Triage)

0e0105255421c63254a48d7b191b585990b42c3e3e74fd4eacf2b2be7a8cba3a Sample

modified 2026-10-14 10:50:04
MimiKatz (Cyber Threat Alliance)

7d23c8cedcc9c49508b00e433fa4c7ae3b7e105ca4182134977c1959401d9399 Sample

modified 2026-10-14 10:04:36
MimiKatz (Cyber Threat Alliance)

273eebb94559eb71c278baee89bd44bd489347acc642bdc26da0a69bd1d1a09d.exe Sample

modified 2026-10-14 03:16:31
Generic Malware (Hybrid-Analysis) · Mimikatz (Triage)

9c6a4b6d24c4a3222e6ff9fcdf7b31f4dadd35f6995cebfc95154d703133d3ec Sample

modified 2026-10-14 01:14:02
MimiKatz (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

4363463463464363463463463.exe.bin Sample

modified 2026-10-14 00:55:15
Socks5Systemz (MalwareBazaar Abuse.ch) · Rhadamanthys (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis) · Generic Malware (Triage) · Blankgrabber (Triage)

2026-10-12_b727448686ae25a90de7da0c9909ab16_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-13 22:21:51
Mimikatz (Triage)

2026-10-12_c2259eb61233e1e1458adb57112fc42f_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-13 21:28:49
Mimikatz (Triage)

b3102060fa99ff41c961de1c5baae8d9d7fe2c92e336a8b785a5a703b95cc0ed Sample

modified 2026-10-13 21:18:05
MimiKatz (Cyber Threat Alliance)

Ransomware.zip Sample

modified 2026-10-13 20:41:46
Fantom (Triage) · Mimikatz (Triage) · Wannacry (Triage) · Infinitylock (Triage) · Cryptolocker (Triage)

2026-10-12_f0784a4cc0dfb2b0e884c645287e92fb_fabookie_glassworm_mimikatz Sample

modified 2026-10-13 18:13:22
Mimikatz (Triage)

2026-10-12_f8accdf39929055876dff6004144a307_fabookie_glassworm_mimikatz Sample

modified 2026-10-13 17:37:13
Mimikatz (Triage)

http://92.127.156.174:8880/mimidrv.sys URL

modified 2026-10-13 13:05:20
Mimikatz (Maltiverse Threat Observatory)

http://92.127.156.174:8880/master.exe URL

modified 2026-10-13 13:05:20
Malware Download (URLhaus Abuse.ch) · Trojan.generic (Maltiverse Threat Observatory) · Mimikatz (Maltiverse Threat Observatory) · MimiKatz (ThreatFox Abuse.ch)

auaadd1.vip Hostname

modified 2026-10-13 02:49:09
Mimikatz (Maltiverse Threat Observatory)

46deeb93c5d7be110d5459abc663ab8edc4bf2d8e098e0d3e96f613205d556f9 Sample

modified 2026-10-12 23:25:05
MimiKatz (MalwareBazaar Abuse.ch) · MimiKatz (ThreatFox Abuse.ch)

2026-02-24_7cbb75c9d12c870c8d3b9b86173a9c35_amadey_cloudeye_coinminer_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-12 22:54:36
Mimikatz (Triage) · Blackmoon (Triage)

mystuff_docs.iso Sample

modified 2026-10-12 17:46:48
Mimikatz (Triage) · Mimikatz (MalwareBazaar Abuse.ch)

2026-09-07_0ead44799fdb8fe389b89fd87a8322bf_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-12 01:29:23
Mimikatz (Triage)

06d269411d74cbc6026eab2776a7cded68dd3380b7e1b890f15d2210d2ff376f Sample

modified 2026-10-12 00:16:57
Generic.Malware (MalwareBazaar Abuse.ch) · MimiKatz (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis)

2026-10-10_3ae23b88ac71e88940b2283d8dce538b_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-11 16:39:18
Mimikatz (Triage)

2026-10-10_3fd0d74e6c0068f6c008ff63d76fbaa9_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-11 16:11:43
Mimikatz (Triage)

4b1a6bf45abc984665eab13691db41e8929a96ad55acd14e6be46c4b9221a4f6 Sample

modified 2026-10-11 15:47:19
Mimikatz (Cyber Threat Alliance)

b4f9beb47cc56ab08c571560df4496d3cc4656209597968a4c2e9b105ba475db Sample

modified 2026-10-11 15:36:58
Mimikatz (Cyber Threat Alliance)

2026-10-10_78319a87ceff6e35f8aaf498b16bb4cd_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-11 10:50:55
Mimikatz (Triage)

2026-10-10_7e9de753beb590fd21e30cc01fe1f785_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-11 10:11:46
Mimikatz (Triage)

2026-10-10_834baec64a9f0dae577954c38b4f88ec_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-11 09:43:44
Mimikatz (Triage)

c5e62815cf534df57de83e0bd85c0c26eeb42cf989a9592f2349aab8f5abb67d Sample

modified 2026-10-11 08:57:32
MimiKatz (Cyber Threat Alliance)

f68fb8b9c334926f4454e9b087df882460b464dc2b9c2c3e680aed4d1a1bb6bf.exe Sample

modified 2026-10-11 03:01:57
Generic Malware (Hybrid-Analysis) · Mimikatz (Triage)

0bec4813ac09bb0de24725afcd62b44e0075031730186747f743329f64a2280a Sample

modified 2026-10-10 15:33:33
Mimikatz (Cyber Threat Alliance)

ce4ba5d544e566a4a83b5edd7e42e6783c2b03187f834913cdd185b3d453fb10 Sample

modified 2026-10-10 15:33:33
Mimikatz (Cyber Threat Alliance)

2026-10-09_4a1725f30809457aae6c0672fd7f0d6e_glassworm_hacktools_icedid_mimikatz_njrat_qilin_vidar Sample

modified 2026-10-10 13:46:22
Mimikatz (Triage)

2026-10-09_f307716c5f93c0d05fcf1b519b256a97_glassworm_hacktools_icedid_mimikatz_njrat_qilin_vidar Sample

modified 2026-10-10 00:22:33
Mimikatz (Triage)

37.27.38.128 IPv4

modified 2026-10-09 19:17:09
MimiKatz (ThreatFox Abuse.ch) · Mail Spammer (Barracuda)

5e14d0c631925ae8ba6b2447c4495ac393c71b9c9e43c04d79d0afcda504cfb4 Sample

modified 2026-10-09 18:50:31
MimiKatz (Cyber Threat Alliance)

2026-10-08_28f639c56c76a3194030f46cd93964a7_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-09 18:40:24
Mimikatz (Triage)

95a93459089ac4cecb72c3a50ee3488dbf3497ee0393e5608bd66cd0bbee3973 Sample

modified 2026-10-09 12:09:30
MimiKatz (Cyber Threat Alliance)

2026-10-08_e8778b36b24ffa568a238e1861f7a344_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mimikatz_njrat_qilin_remcos Sample

modified 2026-10-08 23:02:50
Mimikatz (Triage)

feeae11999f629bd479971b3f970b81758f07f9e0eb54a5da64c48d9ac102163 Sample

modified 2026-10-08 09:38:39
Mimikatz (Triage)

Urget Contract Action.zip Sample

modified 2026-10-08 06:55:25
MimiKatz (ThreatFox Abuse.ch) · Badrabbit (Triage) · Suspicious Sample (Triage)

2026-10-07_d7b5c5590b0ab53b72c5dce6df6c4e36_cobalt-strike_glassworm_hacktools_icedid_mimikatz_njrat_qilin_satacom_vidar Sample

modified 2026-10-08 04:17:01
Mimikatz (Triage)

mimikatz.exe Sample

modified 2026-10-07 16:09:46
Gen:Heur.Mimikatz (Hybrid-Analysis)

2026-08-20_69f100f18c6565f372f27fbef51d7b98_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry Sample

modified 2026-10-07 01:57:49
Mimikatz (Triage)

2026-10-05_48e0edeba94ad11bf22cac7e2ca94c68_fabookie_glassworm_hacktools_mimikatz_qilin Sample

modified 2026-10-07 01:17:14
Mimikatz (Triage)

2026-10-05_5b7b717f414e6eb2da995c2ae397ce88_glassworm_hacktools_icedid_mimikatz_njrat_vidar Sample

modified 2026-10-06 23:55:09
MimiKatz (ThreatFox Abuse.ch) · Mimikatz (Triage)

VencordInstaller.exe Sample

modified 2026-10-06 18:58:48
Generic.Malware (MalwareBazaar Abuse.ch) · MimiKatz (ThreatFox Abuse.ch) · Generic Malware (Hybrid-Analysis) · Salatstealer (Triage) · Quasar (Triage)