MalwareBazaar Database

This page shows some basic information the YARA rule Empire_Invoke_Mimikatz_1_RID3073 including corresponding malware samples.

Database Entry

YARA Rule:Empire_Invoke_Mimikatz_1_RID3073
Create hunting rule
Author:Florian Roth
Description:Empire - a pure PowerShell post-exploitation agent - file Invoke-Mimikatz.ps1
Firstseen:2022-04-20 12:04:01 UTC
Lastseen:2025-10-14 12:07:36 UTC
Sightings:14

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter