General
- Target 2026-08-02_7b826b708889c2f7aea4a27230223a3f_glassworm_krakenkeylogger_njrat_poet-rat
- Size 111.1MB
- Sample260802-1gndlascrd
- SHA256 e0954198ffd6a4226c2bd290fd4392fae20dfc421de8dd4efefd4b3bb37ff3c8
- MD5 7b826b708889c2f7aea4a27230223a3f
- SHA1 61df4d29ce685a5b3c9f888477eca0115fdad45e
- SHA512 cac87c4c060ebe7c5f95ea5aa23eb21dab9da64eaac2670ca00608e93624dab04b787622109430b60f954727b1eb8ebf3e134ba557c4a8a214388f985dfc0889
- SSDEEP 786432:geqeXrqdByAl8z/bbOH0cFl1wcd6b6u7Tpby9X6KPugDNF/U:gLkrqNRF7AnE9X6KPuUxU
- TLSH T1AE487B1163E86E45E27B8278977782A1D6B5BC525311C2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_7b826b708889c2f7aea4a27230223a3f_glassworm_krakenkeylogger_njrat_poet-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_7b826b708889c2f7aea4a27230223a3f_glassworm_krakenkeylogger_njrat_poet-rat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_7b826b708889c2f7aea4a27230223a3f_glassworm_krakenkeylogger_njrat_poet-rat
- Size 111.1MB
- SHA256 e0954198ffd6a4226c2bd290fd4392fae20dfc421de8dd4efefd4b3bb37ff3c8
- MD5 7b826b708889c2f7aea4a27230223a3f
- SHA1 61df4d29ce685a5b3c9f888477eca0115fdad45e
- SHA512 cac87c4c060ebe7c5f95ea5aa23eb21dab9da64eaac2670ca00608e93624dab04b787622109430b60f954727b1eb8ebf3e134ba557c4a8a214388f985dfc0889
- SSDEEP 786432:geqeXrqdByAl8z/bbOH0cFl1wcd6b6u7Tpby9X6KPugDNF/U:gLkrqNRF7AnE9X6KPuUxU
- TLSH T1AE487B1163E86E45E27B8278977782A1D6B5BC525311C2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.