Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:04:09 UTC
Home > List all groups > List all tools > List all groups using tool zhMimikatz
 Tool: zhMimikatz
Names zhMimikatz
Category Malware
Type Loader
Description
(Cylance) zhMimikatz executes the correct version of Mimikatz for the current system, and
parses the results for any cached credentials.
Information
<https://www.cylance.com/content/dam/cylance/pages/operation-cleaver/Cylance_Operation_Cleaver_Report.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.zhmimikatz>
Last change to this tool card: 14 May 2020
Download this tool card in JSON format
All groups using tool zhMimikatz
Changed Name Country Observed
APT groups
  Cutting Kitten, TG-2889 2012-Mar 2016
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=776c2d53-f0a8-4647-8f66-f2025b212948
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=776c2d53-f0a8-4647-8f66-f2025b212948
Page 1 of 1