1745590025ce4ba5d544e566a4a83b5edd7e42e6783c2b03187f834913cdd185b3d453fb10726.dat-decoded

Classification: Malicious

1745590025ce4ba5d544e566a4a83b5edd7e42e6783c2b03187f834913cdd185b3d453fb10726.dat-decoded is a malicious file sample (Windows 64-bit executable, 999.5 KB).

Detection summary

  • 0 antivirus detections (79% detection ratio)
  • 0 IDS alerts
  • 9 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: MIMIKATZ (S0002)

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in AZ.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mimikatz Cyber Threat Alliance 2026-10-10 15:33:33 2026-10-10 15:33:33 country_code:az malicious-activity S0002 Mimikatz
Generic Malware Hybrid-Analysis 2025-04-25 16:15:06 2025-04-25 16:45:11
MimiKatz MalwareBazaar Abuse.ch 2025-04-25 14:07:07 2025-04-25 14:07:07 malicious-activity S0002 Mimikatz
HackTool.Mimikatz Hybrid-Analysis 2021-03-15 16:30:31 2021-03-15 16:30:31

Tags

exploit webshell hacktool

Sample information

Filenames
0bec4813ac09bb0de24725afcd62b44e0075031730186747f743329f64a2280a.exe, 1745590025ce4ba5d544e566a4a83b5edd7e42e6783c2b03187f834913cdd185b3d453fb10726.dat-decoded, download-3.dat.exe
File type
PE32+ executable (DLL) (console) x86-64, for MS Wi ...
Size
1023488 bytes
MD5
8aea2ae91cc084731a08aa231e79a430
SHA-1
fa8e53cb3497cbf81cfee0ddbf171de98b83211d
SHA-256
0bec4813ac09bb0de24725afcd62b44e0075031730186747f743329f64a2280a
First indexed
2021-03-15 16:30:31
Last updated
2025-04-25 16:45:15

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\0bec4813ac09bb0de24725afcd62b44e0075031730186747f743329f64a2280a.exe.dll",#1
WerFault.exe-u -p 7248 -s 632
WerFault.exe-u -p 7248 -s 632
WerFault.exe-u -p 7248 -s 632
WerFault.exe-pss -s 440 -p 7248 -ip 7248
<Ignored Process>
rundll32.exe%WINDIR%\System32\rundll32.exe "C:\download-3.dat.exe.dll",#1
rundll32.exe"C:\download-3.dat.exe.dll",#1