Analysis
- max time kernel
150s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 01:00
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe
- Size 70.0MB
- Sample260801-bctx5styas
- SHA256 0d3319e1616f7f13e13fb1f79419dd0cf6be72b280fee39ed4b53b90200893bf
- MD5 fa3d10cd7f003f616c343880cab9d6ad
- SHA1 83e02f7a33e0b8430f38b3d3a3f6a4a9f5510f41
- SHA512 a07ec0d32ac6bfa33afc6994ba85c198222e84e70482fb0b37e2b5b3dfcbab71cc15b732a5a8d82c221670644611509ad60c7f609a87110a401bdeffb16c9a61
- SSDEEP 393216:wEsQUCA4ljLkr4QlA1BPzPqOcGSeZLbIhvPTxPqBbojnPurBb3vWWm+1jnnGiT38:5zYGtdIvPq67u9zrT3G60clihsBNlUTn
- TLSH T12DF7BF15E3E80B56E63FC27CC663C112E6B1F8461361D6CF0554EA992F63BC1AB37262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3324 2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3324 2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_fa3d10cd7f003f616c343880cab9d6ad_glassworm_krakenkeylogger_njrat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3324