General
- Target 2026-07-02_78a1d158f55e401615ada73ed75546b3_elex_glassworm_wannacry
- Size 87KB
- Sample260702-kqngysds2p
- SHA256 e9b055b25d52a4a62cb26fc6879a0d9c417d4c13ed430a267c3a589e8b5d812d
- MD5 78a1d158f55e401615ada73ed75546b3
- SHA1 4ac2a79a78d8d9a8bfb1fc4eb7efe62f77b1136b
- SHA512 2989b2a8db1f58ae9ef888f35a923cac07fa4edba208e64ac73a3d617f30c252b0964b4d9546a6d6d60a18dc63dd4a03f8020b322fb749438e16cb52053f7aff
- SSDEEP 1536:qkOvQZfMpRKIcqDnYhye0SKBi2eQcL2jLcA:zGoSK8eQcL2jLcA
- TLSH T123935D9F75D588FDF4101EB0146A17B1877BA950033A9BCB3B90CD299A3F1A75E38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_78a1d158f55e401615ada73ed75546b3_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_78a1d158f55e401615ada73ed75546b3_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260629-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_78a1d158f55e401615ada73ed75546b3_elex_glassworm_wannacry
- Size 87KB
- SHA256 e9b055b25d52a4a62cb26fc6879a0d9c417d4c13ed430a267c3a589e8b5d812d
- MD5 78a1d158f55e401615ada73ed75546b3
- SHA1 4ac2a79a78d8d9a8bfb1fc4eb7efe62f77b1136b
- SHA512 2989b2a8db1f58ae9ef888f35a923cac07fa4edba208e64ac73a3d617f30c252b0964b4d9546a6d6d60a18dc63dd4a03f8020b322fb749438e16cb52053f7aff
- SSDEEP 1536:qkOvQZfMpRKIcqDnYhye0SKBi2eQcL2jLcA:zGoSK8eQcL2jLcA
- TLSH T123935D9F75D588FDF4101EB0146A17B1877BA950033A9BCB3B90CD299A3F1A75E38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Change Default File Association
1