mimikatz.exe

Classification: Malicious

mimikatz.exe is a hacktool (Windows 64-bit executable, 983.1 KB). Flagged by 64% of antivirus engines (94 detections). Linked to Mimikatz malware. Seen in PT.

Detection summary

  • 94 antivirus detections (64% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 2 DNS requests

MITRE ATT&CK associations

Malware families: MIMIKATZ (S0002)

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in PT, across transportation networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mimikatz Cyber Threat Alliance 2026-10-11 15:36:58 2026-10-11 15:36:58 country_code:pt industry:transportation-and-logistics malicious-activity S0002 Mimikatz
MimiKatz ThreatFox Abuse.ch 2025-03-17 17:37:49 2025-03-19 17:25:29 S0002 Mimikatz
Gen:Application.Mimikatz Hybrid-Analysis 2019-06-06 07:00:07 2019-06-06 07:00:07

Tags

win.mimikatz

Sample information

Filenames
mimikatz.exe
File type
PE32+ executable (console) x86-64, for MS Windows
Size
1006744 bytes
MD5
736c963c78ed5b4587f36ca6f70dfbcb
SHA-1
cb58316a65f7fe954adf864b678c694fadceb759
SHA-256
b4f9beb47cc56ab08c571560df4496d3cc4656209597968a4c2e9b105ba475db
First indexed
2019-06-06 07:00:07
Last updated
2025-03-19 17:25:33

Antivirus detections

EngineDetection
ALYacMisc.HackTool.Mimikatz
AVGWin64:MiscX-gen [PUP]
AhnLab-V3Trojan/Win32.Mimikatz.R262842
AlibabaTrojan:Win32/Mimikatz.4b2
Antiy-AVLHackTool/Win32.Mimikatz
ArcabitGeneric.Trojan.Mimikatz.Marte.!s!.A.F52B933E
AvastWin64:MiscX-gen [PUP]
AviraHEUR/AGEN.1364969
BitDefenderGeneric.Trojan.Mimikatz.Marte.!s!.A.F52B933E
CAT-QuickHealHackTool.Mimikatz.S13719268
CTXexe.hacktool.mimikatz
ClamAVWin.Tool.Mimikatz-9862700-0
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTool.Mimikatz.506
ESET-NOD32a variant of Win64/Riskware.Mimikatz.D
ElasticWindows.Hacktool.Mimikatz
EmsisoftGeneric.Trojan.Mimikatz.Marte.!s!.A.F52B933E (B)
F-SecureHeuristic.HEUR/AGEN.1364969
FireEyeGeneric.mg.736c963c78ed5b45
FortinetW64/Mimikatz!tr.pws
GDataWin64.Trojan-Stealer.Mimikatz.J
GoogleDetected
GridinsoftHack.Win64.Mimikatz.ka!c
IkarusHackTool.Mimikatz
JiangminTrojan.PSW.Mimikatz.pv
K7AntiVirusTrojan ( 004f7d031 )
K7GWTrojan ( 004f7d031 )
KasperskyHEUR:Trojan.Win32.Generic
Kingsoftmalware.kb.a.920
LionicTrojan.Win32.Mimikatz.4!c
MalwarebytesMimikatz.Spyware.Stealer.DDS
MaxSecureTrojan.Malware.9545116.susgen
McAfeeHTool-MimiKatz!736C963C78ED
McAfeeDti!B4F9BEB47CC5
MicroWorld-eScanGeneric.Trojan.Mimikatz.Marte.!s!.A.F52B933E
MicrosoftHackTool:Win32/Mimikatz
NANO-AntivirusTrojan.Win64.MimiKatz.fqcnvp
Paloaltogeneric.ml
PandaHackingTool/Mimikatz
RisingHackTool.Mimikatz!1.B3A8 (CLASSIC)
SUPERAntiSpywareTrojan.Agent/Gen-PSWMimikatz
SangforHackTool.Win64.Mimikatz.uwccg
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win64.Rootkit.dh
SophosATK/Mimikatz-BE
SymantecHacktool.Mimikatz
TACHYONAbuse-Worry/W32.Mimikatz.1006744
TencentTrojan.Win64.Mimikatz.a
TrendMicroHKTL_MIMIKATZ64
TrendMicro-HouseCallHKTL_MIMIKATZ64
VBA32TrojanPSW.Win64.Mimikatz
VIPREGeneric.Trojan.Mimikatz.Marte.!s!.A.F52B933E
VaristW64/S-b61adc75!Eldorado
ViRobotHackTool.Mimikatz.1006744
VirITPUP.Win32.Delpy.B
WebrootW32.Hacktool.Gen
XcitiumMalware@#3kihpl7irga81
YandexTrojan.GenAsa!JR7XQ53eia4
ZillyaTool.Mimikatz.Win64.649
ZoneAlarmATK/Mimikatz-BE
alibabacloudHackTool:Win/Mimikatz.FZ
huorongHackTool/Mikatz.k
MicroWorld-eScanGen:Application.Mimikatz.2
CAT-QuickHealTrojanpws.Win64
Qihoo-360Win32/Trojan.PSW.a2b
MalwarebytesHackTool.Mimikatz
BitDefenderGen:Application.Mimikatz.2
K7GWHacktool ( 0043c1591 )
K7AntiVirusHacktool ( 0043c1591 )
CyrenW64/S-b61adc75!Eldorado
ClamAVWin.Trojan.Mimikatz-6466236-0
GDataWin64.Riskware.Mimikatz.B
KasperskyHEUR:Trojan-PSW.Win64.Mimikatz.gen
AlibabaHackTool:Win32/Mimikatz.7a630fb8
RisingMalware.Strealer!8.1EF (TFE:dGZlOgUzITxjqpLUYA)
Ad-AwareGen:Application.Mimikatz.2
EmsisoftGen:Application.Mimikatz.2 (B)
ComodoMalware@#3kihpl7irga81
Invinceaheuristic
McAfee-GW-EditionHTool-MimiKatz!736C963C78ED
SophosMimikatz Exploit Utility (PUA)
SentinelOneDFI - Suspicious PE
Antiy-AVLHackTool/Win64.Mimikatz.a
Endgamemalicious (high confidence)
ArcabitApplication.Mimikatz.2
ZoneAlarmHEUR:Trojan-PSW.Win64.Mimikatz.gen
MicrosoftHackTool:Win32/Mimikatz.E
MAXmalware (ai score=91)
TencentWin64.Risk.Riskware.Agbk
eGambithacktool.mimikatz
AVGFileRepMalware [PUP]

DNS requests

cscasha2.ocsp-certum.com subca.ocsp-certum.com

Process list

NameCommand line
mimikatz.exe