General
- Target 2026-08-08_0dc339ba763ddf753cbe85414f29cfb7_glassworm_krakenkeylogger_njrat_poet-rat
- Size 110.7MB
- Sample260808-kzfhpstdqd
- SHA256 da9cf0f0cf146f0c817336512f641120c951f6aac4e5b16c4d5ae39f20bf324e
- MD5 0dc339ba763ddf753cbe85414f29cfb7
- SHA1 05295a60e2eb26ecd8f95d5983909e222a70cc5e
- SHA512 4570ea42b3cff597267655fb9c00904f9edc26eb86d852c416a0aab3b6dddcad49de5e8507a030109e881fafa9ff17ac722320b56106c74b2fa98e41ff3d4cf5
- SSDEEP 786432:GevRXrqdByAl8z/bbOH0cFl1wcd6b6u7Tpby9X6KPugDNF/i:GKtrqNRF7AnE9X6KPuUxi
- TLSH T1F5487B1163E86E45E27B8278977782A1D6B5BC525311C2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_0dc339ba763ddf753cbe85414f29cfb7_glassworm_krakenkeylogger_njrat_poet-rat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0dc339ba763ddf753cbe85414f29cfb7_glassworm_krakenkeylogger_njrat_poet-rat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0dc339ba763ddf753cbe85414f29cfb7_glassworm_krakenkeylogger_njrat_poet-rat
- Size 110.7MB
- SHA256 da9cf0f0cf146f0c817336512f641120c951f6aac4e5b16c4d5ae39f20bf324e
- MD5 0dc339ba763ddf753cbe85414f29cfb7
- SHA1 05295a60e2eb26ecd8f95d5983909e222a70cc5e
- SHA512 4570ea42b3cff597267655fb9c00904f9edc26eb86d852c416a0aab3b6dddcad49de5e8507a030109e881fafa9ff17ac722320b56106c74b2fa98e41ff3d4cf5
- SSDEEP 786432:GevRXrqdByAl8z/bbOH0cFl1wcd6b6u7Tpby9X6KPugDNF/i:GKtrqNRF7AnE9X6KPuUxi
- TLSH T1F5487B1163E86E45E27B8278977782A1D6B5BC525311C2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry