LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceMaliciousVerified

mimikatz.sys

Confirmed vulnerable driver from Microsoft Block List

UUID / 14556074-b235-4378-b356-f58721629d72ADDED / 2023-07-22AUTHOR / Michael Haag

Known samples 12

0 recorded TRUE · 12 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

mimikatz.sysSample 1 · HVCI FALSE
MD5
63060b756377fce2ce4ab9d079ca732f
SHA1
4da007dd298723f920e194501bb49bab769dfb14
SHA256
3033ff03e6f523726638b43d954bc666cdd26483fa5abcf98307952ff88f80ee
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
9b33accbd66ae545907a62b552574805
Authentihash SHA1
3b2ad39da3f313d76fc698dd84a79904d886c3a6
Authentihash SHA256
e7a6c3a40724ba871e13d9c55b7967ed252777a2382fea86e4ed6a2a8203fb4a
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 2 · HVCI FALSE
MD5
650ef9dd70cb192027e536754d6e0f63
SHA1
b7ff8536553cb236ea2607941e634b23aadb59ee
SHA256
47356707e610cfd0be97595fbe55246b96a69141e1da579e6f662ddda6dc5280
Imphash
7641a0c227f0a3a45b80bb8af43cd152
Authentihash MD5
9b7f12a91aaee57a3af614abb56fd618
Authentihash SHA1
cc2cd7bc3220a7c5afdb559f8978c9eca6583075
Authentihash SHA256
82fea578188662b4ed6df4c3aaaf6ebae72a6cd2f8bf135a89150cca1769156b
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 3 · HVCI FALSE
MD5
76f8607fc4fb9e828d613a7214436b66
SHA1
197811ec137e9916e6692fc5c28f6d6609ffc20e
SHA256
be70be9d84ae14ea1fa5ec68e2a61f6acfe576d965fe51c6bac78fba01a744fb
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
350c412cbf84475c1251460180c1d87c
Authentihash SHA1
5816faf0ea63abe56fd20c1ac72d8f3e6d90e9ec
Authentihash SHA256
76718b87861bf6e502aa95ea85e378326c8db1759fe010c941b26cba3c881133
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 4 · HVCI FALSE
MD5
2d37d2fb9b9f8ac52bc02cba4487e3cb
SHA1
632c80a3c95cf589b03812539dea59594eaefae0
SHA256
ece76b79feafb38ae4371e104b6dcbb4253ff3b2acbe5bd14ce6e47525c24f4a
Imphash
7bf14377888c429897eb10a85f70266c
Authentihash MD5
64609ef7b3e2ca2ae15ac30c04002204
Authentihash SHA1
146c60b0dcd8cb8aa82992e56997b2ebe472918f
Authentihash SHA256
184cc3969b79f1856614bed64c1d5562d3363e13a92176f2e9a9235a4aa7d051
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 5 · HVCI FALSE
MD5
a3d69c7e24300389b56782aa63b0e357
SHA1
b555aad38df7605985462f3899572931ee126259
SHA256
c13f5bc4edfbe8f1884320c5d76ca129d00de41a1e61d45195738f125dfe60a7
Imphash
7bf14377888c429897eb10a85f70266c
Authentihash MD5
4a3afa75d4e37084cd63bcb48f960431
Authentihash SHA1
17459f6e341ec31898452c21b3bd9c91faacbc73
Authentihash SHA256
caa87fc917ab2ccf9bf2ad715173d74e031626c6bd3c80dca01f27933fec7242
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 6 · HVCI FALSE
MD5
ac6e29f535b2c42999c50d2fc32f2c9c
SHA1
f6a18fc9c4abe4a82c1ab28abc0a7259df8de7a3
SHA256
accb1a6604efb1b3ce9345c9fd62fe717a84c3e089e09c638e461df89193ef01
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
04bfc5474deae488ead0a665e8bdbecf
Authentihash SHA1
e6d31983f7d3d1f1f9977cad1b1898ff4957ac7c
Authentihash SHA256
19bfc95d74b27684e420b985589105d51772100383e7c3790a34ae311fee03d8
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 7 · HVCI FALSE
MD5
7073cd0085fcba1cd7d3568f9e6d652c
SHA1
bd39ef9c758e2d9d6037e067fbb2c1f2ac7feac8
SHA256
e5ddfa39540d4e7ada56cdc1ebd2eb8c85a408ec078337488a81d1c3f2aaa4ff
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
990ef30c74b89afd7bec043603b8a587
Authentihash SHA1
43d05f5fbdf17de20ce8fc310b1ded0baec7120e
Authentihash SHA256
8210a89ba143d927384d7b2e6b3714d6ae9a9a384796ec6e306df38ca91e9c4e
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 8 · HVCI FALSE
MD5
ed2b653d55c03f0bffa250372d682b75
SHA1
92138cfc14f9e2271f641547e031d5d63c6de19a
SHA256
deade507504d385d8cae11365a2ac9b5e2773ff9b61624d75ffa882d6bb28952
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
bb0cdd5083c04ff1d769240982ad082d
Authentihash SHA1
816f41bb4d927568f72445c1b6f2f5a9b91b881d
Authentihash SHA256
ed8d68c07947c01ca03d886e6ca795a3f8b2f079e8292f019bba3b97b41eef54
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 9 · HVCI FALSE
MD5
85093bb9f027027c2c61aee50796de30
SHA1
6b5aa51f4717d123a468e9e9d3d154e20ca39d56
SHA256
083a311875173f8c4653e9bbbabb689d14aa86b852e7fa9f5512fc60e0fd2c43
Imphash
7df0d3ee663fc0e7c72a95e44ba4c82c
Authentihash MD5
fd4949a0af1fcce6a0861ff981f18c7b
Authentihash SHA1
c785eebe7891724fab3a83472150b902a4fc4d26
Authentihash SHA256
bd9386206a5dfdf63bf642e2917fae6d5e8a1e52874cb2cfbabf79e47b9fed74
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 10 · HVCI FALSE
MD5
6a4fbcfb44717eae2145c761c1c99b6a
SHA1
6a95860594cd8b7e3636bafa8f812e05359a64ca
SHA256
36f45a42ebf2de6962db92aaf8845d7f9fd6895bedc31422adcf31c59a79602d
Imphash
7d017945bf90936a6c40f73f91ed02c2
Authentihash MD5
cf5dee8cce65b166ca275c87eb21d392
Authentihash SHA1
e97da59c611cf90623dc05638f8c866ffee79265
Authentihash SHA256
51141c22e37d651703dd57cfda018ff06a0175a78e7c72f8ad733a281721716a
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 11 · HVCI FALSE
MD5
1ee9f6326649cd23381eb9d7dfdeddf7
SHA1
766949d4599fbf8f45e888c9d6fedf21e04fb333
SHA256
b7956e31c2fcc0a84bcedf30e5f8115f4e74eed58916253a0c05c8be47283c57
Imphash
7bf14377888c429897eb10a85f70266c
Authentihash MD5
903faf17175c8d380fc9dd24bdd68da2
Authentihash SHA1
3bc62bb8baac9a9608b8c9fbcb121e7569a1efd8
Authentihash SHA256
36487117894ca7b93f704e26f22725827f6f04ec3b8c45eaa0d283a11de9a9c3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal
mimikatz.sysSample 12 · HVCI FALSE
MD5
84763d8ca9fe5c3bff9667b2adf667de
SHA1
8b9dd4c001f17e7835fdaf0d87a2f3e026557e84
SHA256
2c14bea0d85c9cad5c5f5c8d0e5442f6deb9e93fe3ad8ea5e8e147821c6f9304
Imphash
7bf14377888c429897eb10a85f70266c
Authentihash MD5
93936f2a18b6a8501653ef021972d628
Authentihash SHA1
c08664c9293219c245006ff18ae75de42722ca60
Authentihash SHA256
be25688313f29d7e62c996572825c33f3dcdda373ec235efe552aeb2219990bb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download malicious sampleView on VirusTotal

Research & references