General
- Target 2026-07-10_389f5223c05d8abed9de3597b1b35b0a_elex_glassworm_wannacry
- Size 211KB
- Sample260710-wrtk5ses8n
- SHA256 68a68d9efcba635faded2ed7ca66182f65e1cec42f01d0c8e0aa5746c95d6fdd
- MD5 389f5223c05d8abed9de3597b1b35b0a
- SHA1 69d622faffacf07b86999a40eeed8f036bccb3f4
- SHA512 0bbd1d17587a9db0ecfc19fc2a04255dc01248f7b214cfd5a818b114eeb8a13e5a16029dfdd8355ae261e020a1c3fc6176512310c11e28bfd9a3a15a3c6f6642
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo6:jkwcEO28wzmJje7Rsei5dho6
- TLSH T1D2246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-10_389f5223c05d8abed9de3597b1b35b0a_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_389f5223c05d8abed9de3597b1b35b0a_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_389f5223c05d8abed9de3597b1b35b0a_elex_glassworm_wannacry
- Size 211KB
- SHA256 68a68d9efcba635faded2ed7ca66182f65e1cec42f01d0c8e0aa5746c95d6fdd
- MD5 389f5223c05d8abed9de3597b1b35b0a
- SHA1 69d622faffacf07b86999a40eeed8f036bccb3f4
- SHA512 0bbd1d17587a9db0ecfc19fc2a04255dc01248f7b214cfd5a818b114eeb8a13e5a16029dfdd8355ae261e020a1c3fc6176512310c11e28bfd9a3a15a3c6f6642
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo6:jkwcEO28wzmJje7Rsei5dho6
- TLSH T1D2246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1