MimiKatz

Malware Family

195 indicators of compromise attributed to MimiKatz across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

185

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (1)IPs (8)URLs (1)Hashes (185)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
www.erp.asyx.co.tz	domain
152.44.47.231	ip
36.138.203.171	ip
85.9.203.21	ip
68.183.34.203	ip
83.136.254.131	ip
51.255.77.201	ip
1.164.253.81	ip
46.38.156.59	ip
http://92.127.156.174:8880/master.exe	url
ba5c6e5d1030b2a5f8fa634f006e46001bbe1d39b9393fb9f3ece011bc9d1dac	hash
2883d9534021c076a27319496686408feda6fdc96e671767a856d3b1192c6d0b	hash
66d82a3bccedaa9b460c09359777464b491d136308538f8820aa8a6dfaa9aa45	hash
48956128660f7a745aa918eac38e5baacdae1bc0809503f2a2c3f2b79507e3ff	hash
92b5c30d0dc79082e817d0ff06a985ead86dfcdff5d067922a027083eb7aba1e	hash
94beb32181e321ef10e85ee652f1ef1e602c252d6c7d4593c556a6bfcec1d4f0	hash
4d6b7a20e7b1f482eb72da51ad88767f3621867f3de10985c2260869c4193ba1	hash
6dcb8ef81ffb990d544d6ecd9b6339ed96f0697359cc25c866ae0e5d9dafa639	hash
b71fc93811b74b31ee4d6d5ab13ed9857947845fdd3366a24007964f00c79212	hash
09859ad6375f684bbfa364788c13fd3625511249bdc7ab292ad6533315a78f8b	hash
504f18d7167c4ddea35f3a1514e0e1a504a246e776e45531d37a2a4accd14009	hash
801f8ffc72692c1c01ce8a492d13e06bc4cf7d1a1cef5ed6e4178e456fa868cb	hash
6d74ed0eda4cf7f7edb2f8982cc706e84a402008fc74f442d898da7d6be05143	hash
86f3b511e1488811dd8d92b4b6085eefc88a2b10d89dcfb6c298244b5f9ff3ac	hash
a1fc61c2d03a03b18d4d7a5c4c2dbbe79730c9aafd36759e0195bb8aeb04328e	hash
1f2338d7b628374139d373af383a1bdec1a16b43ced015849c6be4e4d90cc2c3	hash
05b5a1a5354201eb02051a8555a63d82e98766798f5739111c454103ca2599bb	hash
f76ff3506a59dd4c5f5544dc5461532288f287ebaba2b9c5915364c7b7019b24	hash
03cf1ab083083cb0b7bc90d18f9f8e3f78504f288daece26bfc0ec96aadd2947	hash
cacc818c54776b78e4616c93a7248e246334ae0e935f599bd338317b2140cba5	hash

Another file to check? Run a file hash reputation check.