General
- Target 2026-04-24_db39a8993f072dae1ec0e21684d657d9_elex_glassworm_wannacry
- Size 194KB
- Sample260424-qs8tkab12q
- SHA256 78983d0b239b9803cb66831fbf7d30967659c54c4dae54287b274ac855018c2f
- MD5 db39a8993f072dae1ec0e21684d657d9
- SHA1 7ed95c3a9d8f9538113927a1c86c5494e10ce5e4
- SHA512 18549dbe9609524f9ce0045caa2cb182c1de5185e70aebe5c392716292c606f00c3234456dfb5e5e627a4b797ddc5503c9a95ca7017177a94bf05c5bbfaf766d
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTM:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kj
- TLSH T186147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-24_db39a8993f072dae1ec0e21684d657d9_elex_glassworm_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_db39a8993f072dae1ec0e21684d657d9_elex_glassworm_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_db39a8993f072dae1ec0e21684d657d9_elex_glassworm_wannacry
- Size 194KB
- SHA256 78983d0b239b9803cb66831fbf7d30967659c54c4dae54287b274ac855018c2f
- MD5 db39a8993f072dae1ec0e21684d657d9
- SHA1 7ed95c3a9d8f9538113927a1c86c5494e10ce5e4
- SHA512 18549dbe9609524f9ce0045caa2cb182c1de5185e70aebe5c392716292c606f00c3234456dfb5e5e627a4b797ddc5503c9a95ca7017177a94bf05c5bbfaf766d
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTM:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kj
- TLSH T186147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1