Overview

overview

10

Static

static

10

2026-06-05...at.exe

windows10-2004-x64

9

2026-06-05...at.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-06-05_01fe10b4db24a4f44322c8a8fac2913a_glassworm_megazord_njrat
  • Size 64.9MB
  • Sample260605-py79jsgz4j
  • SHA256 a7e75d8e382baa62e0cc214d221b01c5398b4616b26d752dcb5f47678868d670
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasionexecutionimpactpersistenceransomware

Malware Config

Targets

    • Target
      2026-06-05_01fe10b4db24a4f44322c8a8fac2913a_glassworm_megazord_njrat
    • Size 64.9MB
    • SHA256 a7e75d8e382baa62e0cc214d221b01c5398b4616b26d752dcb5f47678868d670
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasionexecutionimpactpersistenceransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

System Services

1
T1569

Service Execution

1
T1569.002

Windows Management Instrumentation

1
T1047

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Direct Volume Access

1
T1006

Indicator Removal

2
T1070

File Deletion

2
T1070.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

2
T1490

Tasks