General
- Target 2026-07-20_13383ff858c58ea1765d8c9fdd05d669_elex_glassworm_wannacry
- Size 211KB
- Sample260720-d2z7kagx5w
- SHA256 ff5b0666db6fb6c7d56cfec0e1ba69eec756281be3e981c49eae58c4d8766372
- MD5 13383ff858c58ea1765d8c9fdd05d669
- SHA1 16afde36773e599f7ac0c2b99ae44ef2edd84498
- SHA512 4f80f478676e8bc9c55a674df546a3f96100ed6591b32f2dc93e92bfa848cdc23b8e950a91467a35dbe9e5dca2b2bf805c3aa3bdb0fedfddfaa1ffb60cb07f17
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qop:jkwcEO28wzmJje7Rsei5dhop
- TLSH T1D7246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_13383ff858c58ea1765d8c9fdd05d669_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_13383ff858c58ea1765d8c9fdd05d669_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_13383ff858c58ea1765d8c9fdd05d669_elex_glassworm_wannacry
- Size 211KB
- SHA256 ff5b0666db6fb6c7d56cfec0e1ba69eec756281be3e981c49eae58c4d8766372
- MD5 13383ff858c58ea1765d8c9fdd05d669
- SHA1 16afde36773e599f7ac0c2b99ae44ef2edd84498
- SHA512 4f80f478676e8bc9c55a674df546a3f96100ed6591b32f2dc93e92bfa848cdc23b8e950a91467a35dbe9e5dca2b2bf805c3aa3bdb0fedfddfaa1ffb60cb07f17
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qop:jkwcEO28wzmJje7Rsei5dhop
- TLSH T1D7246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1