b311fc9d0001706daff676152dcbc76780eb2218d3d7dceaf9f1744185f24982

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_efaab0c92b5be4ccffdd7b41fcafb762_glassworm_megazord_njrat.exe
Size 64.4MB
Sample260810-ebjmkavtbx
SHA256 b311fc9d0001706daff676152dcbc76780eb2218d3d7dceaf9f1744185f24982
MD5 efaab0c92b5be4ccffdd7b41fcafb762
SHA1 383971d7fdfb73059d6e765c33f8f115c6562bf8
SHA512 3e3b7dbd4d2a3d894cbfaa32eaf186aca86871bfe14d6dd1ea94848e0641cc45c30260e9e05b8e44790ecd0f84174cb266b22347cd86970d650730c8ba33b2c4
SSDEEP 393216:4j/9zVIMLN4YyIH9HGy8OJu83y3lZs/Y4Yg6glb/vG5L5OtsFtuNTa3nbRNn1JJA:+uMLNn38OA83yg1Yg1WV5OtsFktaPxA
TLSH
T1DCE7AE15B3D80A16E63FC27DC2638102E7F1B4931352C7CF4558EA992F63BC1AA77266
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\Control Panel\International\Geo\Nation	2026-08-10_efaab0c92b5be4ccffdd7b41fcafb762_glassworm_megazord_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_efaab0c92b5be4ccffdd7b41fcafb762_glassworm_megazord_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_efaab0c92b5be4ccffdd7b41fcafb762_glassworm_megazord_njrat.exe"
1⤵
- Checks computer location settings
PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads