General
- Target 2026-07-05_b64166f001a9c54231042b0f9b3d9352_agent-tesla_glassworm_hijackloader_krakenkeylogger_njrat_poet-rat
- Size 119.4MB
- Sample260705-yrjgaabs3r
- SHA256 c198abf8f03066f38eae168a316e9f183f13d561a50e621d77b5aca98d5c7e34
- MD5 b64166f001a9c54231042b0f9b3d9352
- SHA1 dda32b2dc6a8dbf82185115ef7d3f5433fe4b3af
- SHA512 1f0f6513f9358984cbd871b8ee357cc17853e5d980eda3ccbd2003dfd72e9a3fd25935128e18c9447bde990136b47ffcd6e9315a8f41c892caccedaa1d58bae1
- SSDEEP 786432:186uLpkr2dY/aBcjJOBHOBIQBajMtWvoJiLE1+XgRKz89G/4ZSb0Funwh6DsN2PH:1gFs50HZRvaT1q9X6KPuSpOk
- TLSH T10E586C1163E86A45D23AB278977342ADD6B5BC52D311D2CF0084F9493F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b64166f001a9c54231042b0f9b3d9352_agent-tesla_glassworm_hijackloader_krakenkeylogger_njrat_poet-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b64166f001a9c54231042b0f9b3d9352_agent-tesla_glassworm_hijackloader_krakenkeylogger_njrat_poet-rat.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b64166f001a9c54231042b0f9b3d9352_agent-tesla_glassworm_hijackloader_krakenkeylogger_njrat_poet-rat
- Size 119.4MB
- SHA256 c198abf8f03066f38eae168a316e9f183f13d561a50e621d77b5aca98d5c7e34
- MD5 b64166f001a9c54231042b0f9b3d9352
- SHA1 dda32b2dc6a8dbf82185115ef7d3f5433fe4b3af
- SHA512 1f0f6513f9358984cbd871b8ee357cc17853e5d980eda3ccbd2003dfd72e9a3fd25935128e18c9447bde990136b47ffcd6e9315a8f41c892caccedaa1d58bae1
- SSDEEP 786432:186uLpkr2dY/aBcjJOBHOBIQBajMtWvoJiLE1+XgRKz89G/4ZSb0Funwh6DsN2PH:1gFs50HZRvaT1q9X6KPuSpOk
- TLSH T10E586C1163E86A45D23AB278977342ADD6B5BC52D311D2CF0084F9493F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.