General
- Target 2026-07-09_1ecebd80cb71653fff016e75a6e1c52d_dcrat_elex_glassworm_krakencryptor
- Size 13.3MB
- Sample260709-sdnwyscv9n
- SHA256 ab974bd4be6f0a35552d3cc4a887d4c136ba09c5d88fe31f23740ef1eff4ed14
- MD5 1ecebd80cb71653fff016e75a6e1c52d
- SHA1 fe408f3e87fd4c14572d7ef6fb1a70c06c4c5757
- SHA512 9e2038e4778263cbb74b33659afae81bc571ada2543716f1eeccfdcfe0b0c4834be0d9c3db8d0a0096d87d015df0080caea492f8020843f271d9689528231dcf
- SSDEEP 196608:thT227p+VDtj4Z/X8SxFC/KnfzNg1mPvKQ2jptOjt6W4vklTNDquvgwNlqbITSvv:pJhlT1qR37+lb56ET9mGgdrX47MGp4I
- TLSH T11BE60240FACB41F1E94B55305197F72F5B388203C418DF99FD5C9A81FF23A6289297AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_1ecebd80cb71653fff016e75a6e1c52d_dcrat_elex_glassworm_krakencryptor.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1ecebd80cb71653fff016e75a6e1c52d_dcrat_elex_glassworm_krakencryptor.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1ecebd80cb71653fff016e75a6e1c52d_dcrat_elex_glassworm_krakencryptor
- Size 13.3MB
- SHA256 ab974bd4be6f0a35552d3cc4a887d4c136ba09c5d88fe31f23740ef1eff4ed14
- MD5 1ecebd80cb71653fff016e75a6e1c52d
- SHA1 fe408f3e87fd4c14572d7ef6fb1a70c06c4c5757
- SHA512 9e2038e4778263cbb74b33659afae81bc571ada2543716f1eeccfdcfe0b0c4834be0d9c3db8d0a0096d87d015df0080caea492f8020843f271d9689528231dcf
- SSDEEP 196608:thT227p+VDtj4Z/X8SxFC/KnfzNg1mPvKQ2jptOjt6W4vklTNDquvgwNlqbITSvv:pJhlT1qR37+lb56ET9mGgdrX47MGp4I
- TLSH T11BE60240FACB41F1E94B55305197F72F5B388203C418DF99FD5C9A81FF23A6289297AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE