General
- Target 2026-09-13_d96c64fdd837452d8a4030ea2cbcd130_elex_glassworm_krakencryptor_remcos
- Size 933KB
- Sample260913-llff8axvgx
- SHA256 e1e4958677c45f00daf4dd7aa0c44d275e71c7029596205f8a812df910b337ba
- MD5 d96c64fdd837452d8a4030ea2cbcd130
- SHA1 17e1ddc321f569c5809007f985a7ae1bc97bffaa
- SHA512 4b2befe5d5d244a7de2caf45a4bf9bbebfd3763959b885a523c1b3eda7d20252f2c3ffbbd48fb39226d6df881db4cd5d57788440c80fd10ca6e04922d0a74368
- SSDEEP 12288:a8VkOEQBzJm1MFm1Miw3cTeOs0m1Mxm1Mpm1MXOswRc4MWk7eUr17L3rJc5Ktck0:tBzkN+f999EfQc4Mj7ZL39qMgF/
- TLSH T1BB159E056ADEAD46E52A23B1E4317410D7BAED02617DD3CF29E62D9F1CB3B045E026B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_d96c64fdd837452d8a4030ea2cbcd130_elex_glassworm_krakencryptor_remcos.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_d96c64fdd837452d8a4030ea2cbcd130_elex_glassworm_krakencryptor_remcos.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_d96c64fdd837452d8a4030ea2cbcd130_elex_glassworm_krakencryptor_remcos
- Size 933KB
- SHA256 e1e4958677c45f00daf4dd7aa0c44d275e71c7029596205f8a812df910b337ba
- MD5 d96c64fdd837452d8a4030ea2cbcd130
- SHA1 17e1ddc321f569c5809007f985a7ae1bc97bffaa
- SHA512 4b2befe5d5d244a7de2caf45a4bf9bbebfd3763959b885a523c1b3eda7d20252f2c3ffbbd48fb39226d6df881db4cd5d57788440c80fd10ca6e04922d0a74368
- SSDEEP 12288:a8VkOEQBzJm1MFm1Miw3cTeOs0m1Mxm1Mpm1MXOswRc4MWk7eUr17L3rJc5Ktck0:tBzkN+f999EfQc4Mj7ZL39qMgF/
- TLSH T1BB159E056ADEAD46E52A23B1E4317410D7BAED02617DD3CF29E62D9F1CB3B045E026B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE