General
- Target 2026-07-02_a2d06d06384dc5f58b2dfd5e5f5cbe4c_elex_glassworm_wannacry
- Size 211KB
- Sample260702-vfkcnaft8n
- SHA256 6319bee8e812e8ae4f52eb5b0da4440724bbe6c452e2a672e934924b45648771
- MD5 a2d06d06384dc5f58b2dfd5e5f5cbe4c
- SHA1 7ad9ca1652d813d826bf2c55edb6373e88069ea1
- SHA512 d6b66dbd95e4b029390c18be58bb6c081c3f985108b357fc81606b1d1533eb8a58cd9bbb9515a10a78c8a65e57c0baa012af80dd1e0f9d12792296fd9e87dda8
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qoJ:jkwcEO28wzmJje7Rsei5dhoJ
- TLSH T1C1246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-02_a2d06d06384dc5f58b2dfd5e5f5cbe4c_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a2d06d06384dc5f58b2dfd5e5f5cbe4c_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a2d06d06384dc5f58b2dfd5e5f5cbe4c_elex_glassworm_wannacry
- Size 211KB
- SHA256 6319bee8e812e8ae4f52eb5b0da4440724bbe6c452e2a672e934924b45648771
- MD5 a2d06d06384dc5f58b2dfd5e5f5cbe4c
- SHA1 7ad9ca1652d813d826bf2c55edb6373e88069ea1
- SHA512 d6b66dbd95e4b029390c18be58bb6c081c3f985108b357fc81606b1d1533eb8a58cd9bbb9515a10a78c8a65e57c0baa012af80dd1e0f9d12792296fd9e87dda8
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qoJ:jkwcEO28wzmJje7Rsei5dhoJ
- TLSH T1C1246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1