General
- Target 2026-06-29_3b9b3d25ee97962add56f33ca85b61ef_elex_glassworm_wannacry
- Size 194KB
- Sample260630-mvb1tsc17s
- SHA256 884a1e237830e420374895264da0d22ac7607c38e83d92d56cb076078a5968b5
- MD5 3b9b3d25ee97962add56f33ca85b61ef
- SHA1 503082e14e681590967ae064261f17973e8a10c6
- SHA512 29be706ade68b450ac2c50fdd73c19fd6aa63e8248514f8e6c7c7c642b9a924b0fd4c125c465fa034f91305c6d0aa2a64d851289058de302b93c764846ef7f7e
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTi:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kx
- TLSH T164147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-29_3b9b3d25ee97962add56f33ca85b61ef_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_3b9b3d25ee97962add56f33ca85b61ef_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_3b9b3d25ee97962add56f33ca85b61ef_elex_glassworm_wannacry
- Size 194KB
- SHA256 884a1e237830e420374895264da0d22ac7607c38e83d92d56cb076078a5968b5
- MD5 3b9b3d25ee97962add56f33ca85b61ef
- SHA1 503082e14e681590967ae064261f17973e8a10c6
- SHA512 29be706ade68b450ac2c50fdd73c19fd6aa63e8248514f8e6c7c7c642b9a924b0fd4c125c465fa034f91305c6d0aa2a64d851289058de302b93c764846ef7f7e
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTi:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kx
- TLSH T164147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1