General
- Target 2026-07-09_93f171272cd8de677afc714db303dec3_elex_glassworm_wannacry
- Size 96KB
- Sample260709-j4rwvsfw8t
- SHA256 ab0d472bcf6b18e831f0f887fa4e6031d346dba363c2dd044b8b59b459b2228d
- MD5 93f171272cd8de677afc714db303dec3
- SHA1 8623a4f659e600254ae475e1a2032c58aec36ad3
- SHA512 99af4833c7aa8604ad80ae264c119cf5d86eac44ed68eda7932ce76f43831838988d341599eb24c5b8e2ed89f6cc7b0cc0bb7f74489510b66b21ec97212f3984
- SSDEEP 1536:qkOvQZfMpRKIcqDnYhye0SKBi2eQcLfnZEfdU3xTl40hNj:zGoSK8eQcLfnZEfdU3xTl40hNj
- TLSH T134A339AF76998CB8F4101FB400661BB6876B6560073E4BCB3791DE196F3E4675E38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_93f171272cd8de677afc714db303dec3_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_93f171272cd8de677afc714db303dec3_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_93f171272cd8de677afc714db303dec3_elex_glassworm_wannacry
- Size 96KB
- SHA256 ab0d472bcf6b18e831f0f887fa4e6031d346dba363c2dd044b8b59b459b2228d
- MD5 93f171272cd8de677afc714db303dec3
- SHA1 8623a4f659e600254ae475e1a2032c58aec36ad3
- SHA512 99af4833c7aa8604ad80ae264c119cf5d86eac44ed68eda7932ce76f43831838988d341599eb24c5b8e2ed89f6cc7b0cc0bb7f74489510b66b21ec97212f3984
- SSDEEP 1536:qkOvQZfMpRKIcqDnYhye0SKBi2eQcLfnZEfdU3xTl40hNj:zGoSK8eQcLfnZEfdU3xTl40hNj
- TLSH T134A339AF76998CB8F4101FB400661BB6876B6560073E4BCB3791DE196F3E4675E38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Change Default File Association
1