"Powerkatz (Staged)" Ability ends with "ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list"

[satk0]

Describe the bug
Running an operation with the "Powerkatz (Staged)" ability yields the following error, despite that the ability ends with a status "success":

  .#####.   mimikatz 2.2.0 (x64) #19041 Jun 16 2020 13:40:08
 .## ^ ##.  "A La Vie, A L'Amour" - (oe.eo)
 ## / \ ##  /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
 ## \ / ##       > http://blog.gentilkiwi.com/mimikatz
 '## v ##'       Vincent LE TOUX             ( vincent.letoux@gmail.com )
  '#####'        > http://pingcastle.com / http://mysmartlogon.com   ***/

mimikatz(powershell) # sekurlsa::logonpasswords
ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list

mimikatz(powershell) # exit
Bye!

"Alice 2.0" adversary is affected by this as it could not proceed further steps.

To Reproduce
Steps to reproduce the behavior:

1. Elevate the powershell prompt to "NT AUTHORITY\SYSTEM".
2. Run Caldera agent powershell script on an another machine.
3. Create an adversary with "Powerkatz (Staged)" ability and run a new operation with it on the agent.

Expected behavior
List extracted credentials.

Desktop (please complete the following information):
PC with Caldera:

• OS Name: Microsoft Windows Server 2022 Standard
• OS Version: 10.0.20348 N/A Build 20348
• Caldera Version: master (commit: 0f2fca5)

Agent:

• OS Name: Microsoft Windows 10 Pro
• OS Version: 10.0.19045 N/A Build 19045

Additional context
To resolve this issue, Mimikatz needs to be updated, check: https://prathameshbagul.medium.com/a-fix-for-error-kuhl-m-sekurlsa-acquirelsa-logon-list-6c599fb6ad39

[github-actions]

Looks like your first issue -- we aim to respond to issues as quickly as possible. In the meantime, check out our documentation here: http://caldera.readthedocs.io/

[uruwhy]

One thing to note is that the mimikatz version mentioned in the medium article will not work on Windows 11 systems. There have been updates to the mimikaz repo since 2022 to support some of the early Win11 versions, though those updates have not been included in a new release (latest release is from 2022)