Mimikatz
Essential information
- Confidence
- 100/100
- Is family
- No
- Published
- 20/12/2025 19:35
- Modified
- 26/06/2026 10:38
- Revoked
- No
- Author / Source
- AlienVault
- Related entities
- 69 attack patterns (mitre), 5 intrusion sets (apt), 9 sectors, 8 countries, 103 indicators, 17 vulnerabilities (cve), 20 reports
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (69)
-
TA0005 uses
-
T1047 usesWindows Management Instrumentation MITRE
-
T1489 usesService Stop MITRE
-
T1211 MITRE
-
T1039 usesData from Network Shared Drive MITRE
-
T1573 usesEncrypted Channel MITRE
-
T1069.002 usesDomain Groups MITRE
-
T1567.002 usesExfiltration to Cloud Storage MITRE
-
T1021.002 usesSMB/Windows Admin Shares MITRE
-
T1060 uses
-
T1046 usesNetwork Service Discovery MITRE
-
T1218.007 usesMsiexec MITRE
Intrusion sets (APT) (5)
-
The Gentlemen usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Rhantus usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Trigona usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Kimsuky and Andariel usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Jumpy Pisces usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (9)
-
Commercial Facilities targets
-
Emergency Services targets
-
Energy targets
-
Information Technologies Consulting targets
-
High-tech targets
-
Technology targets
-
Education targets
-
Government targets
-
Manufacturing targets
Countries (8)
-
British Indian Ocean Territory targets
-
Kazakhstan targets
-
United Kingdom of Great Britain and Northern Ireland targets
-
South Africa targets
-
France targets
-
India targets
-
Singapore targets
-
Brazil targets
Indicators (103)
-
stix 100/100 Revoked
Delphi
· Valid until 29/10/2025 · Source: AlienVault -
stix 100/100· Valid until 22/06/2027 · Source: AlienVault
-
stix 100/100· Valid until 08/05/2027 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 09/06/2026 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 01/11/2025 · Source: AlienVault
-
stix 100/100· Valid until 08/05/2027 · Source: AlienVault
-
stix 100/100· Valid until 06/12/2026 · Source: AlienVault
-
stix 100/100· Valid until 16/04/2027 · Source: AlienVault
-
ap-northeast-1.s3-azure.comindicatesstix 100/100 Revoked· Valid until 25/06/2026 · Source: AlienVault -
stix 100/100 Revoked· Valid until 23/11/2025 · Source: AlienVault
-
stix 100/100· Valid until 06/12/2026 · Source: AlienVault
Vulnerabilities (CVE) (17)
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
- Published
- 03/03/2022
- Modified
- 21/12/2025
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to …
- Attack vector
- Network
- Published
- 02/11/2023
- Modified
- 21/12/2025
Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread …
- Attack vector
- Network
- Published
- 10/07/2025
- Modified
- 21/12/2025
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or …
- Published
- 23/03/2026
- Modified
- 10/07/2026
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
- Published
- 24/05/2022
- Modified
- 10/07/2026
Reports (20)
-
17 MITREs 3 Malwares 1 APT
-
9 CVEs 23 MITREs 4 Malwares 14 Observables 1 APT
-
4 MITREs 3 Malwares 23 Observables
-
20 MITREs 6 Malwares 19 Observables 1 APT
-
AlienVault Confidence 100 4 CVEs 17 MITREs 3 Malwares 9 IOCs 6 Observables 1 APT
-
AlienVault Confidence 100 19 MITREs 5 Malwares 20 IOCs 1 APT
-
AlienVault Confidence 100 3 CVEs 1 Malware 6 IOCs
-
AlienVault Confidence 100 19 MITREs 3 Malwares 6 IOCs 1 APT