General
- Target 2026-06-04_b4a8094e917283b1bd6ae303098081e5_glassworm_megazord_njrat
- Size 65.0MB
- Sample260604-ydn5lsds31
- SHA256 9626d68ed6c0824bd3489c7152e54e5f8c90f121e5618db58a69382b4d2e4b62
- MD5 b4a8094e917283b1bd6ae303098081e5
- SHA1 e671470197914740191c33fa45237ad9c7c74310
- SHA512 9d1abb68a5a016dc19a014cc660b8c54c0460bc9bf1c1aa7416189d331b839de038857974b0aad87739435a34a8f2f080ea82cb4e54608b30a600b6e07ff2f2a
- SSDEEP 393216:WumbnzdAN7yyngUGqROht89sblZv1YjsY1inglb/vE5L5OtsFtBNTaNZd44AJBvs:CdylROX892vY1FUV5OtsFntaRu0
- TLSH T1C2E7AF15B3D80A06E63FC27DC2638112E7F1B4931352D6CF0558EA992F53BC1AB7B266
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-04_b4a8094e917283b1bd6ae303098081e5_glassworm_megazord_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
Mutex
-
p7qtFjuNFL7Q
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
aes.plain
Targets
-
- Target 2026-06-04_b4a8094e917283b1bd6ae303098081e5_glassworm_megazord_njrat
- Size 65.0MB
- SHA256 9626d68ed6c0824bd3489c7152e54e5f8c90f121e5618db58a69382b4d2e4b62
- MD5 b4a8094e917283b1bd6ae303098081e5
- SHA1 e671470197914740191c33fa45237ad9c7c74310
- SHA512 9d1abb68a5a016dc19a014cc660b8c54c0460bc9bf1c1aa7416189d331b839de038857974b0aad87739435a34a8f2f080ea82cb4e54608b30a600b6e07ff2f2a
- SSDEEP 393216:WumbnzdAN7yyngUGqROht89sblZv1YjsY1inglb/vE5L5OtsFtBNTaNZd44AJBvs:CdylROX892vY1FUV5OtsFntaRu0
- TLSH T1C2E7AF15B3D80A06E63FC27DC2638112E7F1B4931352D6CF0558EA992F53BC1AB7B266
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Detects file containing reversed ASEP Autorun registry keys
-
Executes dropped EXE
-
Loads dropped DLL