9b360974c41a5d612eb026fb5e3bb1fa28e08865f7a4f915665b8bc94bd3bc31

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 22:07

Target
2026-08-08_5552f1aade90ba1ce6c680af9eeb3c99_glassworm_krakenkeylogger_njrat_poet-rat.exe
Size 76.6MB
Sample260808-11qcasvgre
SHA256 9b360974c41a5d612eb026fb5e3bb1fa28e08865f7a4f915665b8bc94bd3bc31
MD5 5552f1aade90ba1ce6c680af9eeb3c99
SHA1 73c8260d2a6072e4425fcd5b6e85f3320d3ecf90
SHA512 86c76fc77a1e0c00c44625e54c0b99299fa4eae1d10df8a5b9318977e912a55a9b7fb727f42cea61737b1c7bb87ea1b240c70d983c8458d821788179fbb02045
SSDEEP 786432:TGYalsFd+U4DVOK33ZiSOH0q4DlpFcz7yTw:TEmFdX0Zi0yS8
TLSH
T1AC08AE14A3D84B16E67FC27DC2638112E6B1B4531361E6CF749CDA982F63BC1A737262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1480	2026-08-08_5552f1aade90ba1ce6c680af9eeb3c99_glassworm_krakenkeylogger_njrat_poet-rat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_5552f1aade90ba1ce6c680af9eeb3c99_glassworm_krakenkeylogger_njrat_poet-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_5552f1aade90ba1ce6c680af9eeb3c99_glassworm_krakenkeylogger_njrat_poet-rat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1480