mimikatz.exe

Classification: Malicious

mimikatz.exe is a hacktool (Windows executable, 1.1 MB). Flagged by 63% of antivirus engines (44 detections). Linked to Mimikatz malware.

Detection summary

  • 44 antivirus detections (63% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 2 DNS requests

MITRE ATT&CK associations

Malware families: MIMIKATZ (S0002)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gen:Heur.Mimikatz Hybrid-Analysis 2020-10-06 09:15:46 2020-10-06 09:15:46 S0002 Mimikatz

Tags

hacktool

Sample information

Filenames
mimikatz.exe
File type
PE32 executable (console) Intel 80386, for MS Windows
Size
1187328 bytes
MD5
81b60750e4689a5daedcfeadbeb164ef
SHA-1
587463907b65a677ef72fd22f8944cfc394036f9
SHA-256
db5f210dff631bad1e8e3888efe1b22c232714cb018c8c26508385637a25e1c3
First indexed
2020-10-06 09:15:46
Last updated
2026-10-07 16:09:46

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
DrWebTool.Mimikatz.875
MicroWorld-eScanGen:Heur.Mimikatz.1
CAT-QuickHealHackTool.Mimikatz.S13719266
McAfeePUP-XES-SQ
MalwarebytesHackTool.Mimikatz
K7AntiVirusRiskware ( 004f7f5e1 )
K7GWRiskware ( 004f7f5e1 )
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderThetaGen:NN.ZexaF.34282.iv0@a4UJXXmi
SymantecHacktool.Mimikatz
ESET-NOD32a variant of Win32/RiskWare.Mimikatz.E
APEXMalicious
ClamAVWin.Trojan.Mimikatz-6466236-0
KasperskyTrojan-PSW.Win32.Mimikatz.gen
BitDefenderGen:Heur.Mimikatz.1
NANO-AntivirusTrojan.Win32.Mimikatz.hvcnyf
AvastWin32:HacktoolX-gen [Trj]
Ad-AwareGen:Heur.Mimikatz.1
EmsisoftGen:Heur.Mimikatz.1 (B)
VIPRETrojan.Win32.Generic!BT
InvinceaTroj/Mimkatz-AE
McAfee-GW-EditionPUP-XES-SQ
FireEyeGeneric.mg.81b60750e4689a5d
SophosTroj/Mimkatz-AE
IkarusHackTool.Mimikatz
eGambithacktool.mimikatz
Antiy-AVLHackTool/Win64.Mimikatz.a
MicrosoftHackTool:Win32/Mimikatz.D
ArcabitTrojan.Mimikatz.1
ZoneAlarmTrojan-PSW.Win32.Mimikatz.gen
GDataGen:Heur.Mimikatz.1
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win64.Mimikatz.R285461
Acronissuspicious
VBA32BScope.TrojanPSW.Mimikatz
ALYacGen:Heur.Mimikatz.1
MAXmalware (ai score=80)
RisingHackTool.Mimikatz!1.B3A8 (CLASSIC)
SentinelOneDFI - Malicious PE
WebrootW32.Hacktool.Gen
AVGWin32:HacktoolX-gen [Trj]
Cybereasonmalicious.0e4689
PandaHackingTool/Mimikatz

DNS requests

_ldap._tcp.dc._msdcs.scl3.dc isatap.scl3.dc

Process list

NameCommand line
mimikatz.exe