1. Home
  2. Software
  3. MimiPenguin

MimiPenguin

MimiPenguin is a credential dumper, similar to Mimikatz, designed specifically for Linux platforms. [1]

ID: S0179
ⓘ
Type: TOOL
ⓘ
Platforms: Linux
Contributors: Vincent Le Toux
Version: 1.2
Created: 16 January 2018
Last Modified: 15 October 2021
Enterprise Layer
download view

Techniques Used

Domain ID Name Use
Enterprise T1003 .007 OS Credential Dumping: Proc Filesystem

MimiPenguin can use the <PID>/maps and <PID>/mem file to search for regex patterns and dump the process memory.[1][2]

Groups That Use This Software

ID Name References
G0139 TeamTNT

[3]

References

  1. Gregal, H. (2017, May 12). MimiPenguin. Retrieved December 5, 2017.
  2. Huseyin Can YUCEEL & Picus Labs. (2022, March 22). Retrieved March 31, 2023.
  1. Quist, N. (2020, October 5). Black-T: New Cryptojacking Variant from TeamTNT. Retrieved September 22, 2021.