General
- Target 2026-05-27_2322b54cb89eb6319a4e54e69a8966ec_elex_glassworm_wannacry
- Size 211KB
- Sample260527-t96bjsds3p
- SHA256 6baee0c15d54a7960447297bc7f6cc7324cc6b46720eb248ed37755cac25e3c8
- MD5 2322b54cb89eb6319a4e54e69a8966ec
- SHA1 a3e3a4c4295c75d49a3682580deac68f76c0b7b5
- SHA512 f9d4e59799a742573843216542d07dfda61cb85be8cb28afa90c2d8d1376a31f710013f0d57dfe3fceb8b1acc17187b614e173632c821caea3a7322a578c765a
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo9:jkwcEO28wzmJje7Rsei5dho9
- TLSH T128246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-27_2322b54cb89eb6319a4e54e69a8966ec_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_2322b54cb89eb6319a4e54e69a8966ec_elex_glassworm_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_2322b54cb89eb6319a4e54e69a8966ec_elex_glassworm_wannacry
- Size 211KB
- SHA256 6baee0c15d54a7960447297bc7f6cc7324cc6b46720eb248ed37755cac25e3c8
- MD5 2322b54cb89eb6319a4e54e69a8966ec
- SHA1 a3e3a4c4295c75d49a3682580deac68f76c0b7b5
- SHA512 f9d4e59799a742573843216542d07dfda61cb85be8cb28afa90c2d8d1376a31f710013f0d57dfe3fceb8b1acc17187b614e173632c821caea3a7322a578c765a
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo9:jkwcEO28wzmJje7Rsei5dho9
- TLSH T128246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1