General
- Target 2026-07-24_df24586d1fd625e02eeb8776a3e2bd7d_elex_glassworm_wannacry
- Size 90KB
- Sample260724-kqtc7sfc48
- SHA256 5681245fdb95d61746831dab3c6c6e442f3bd66a76c285870c9b0c8573df2a56
- MD5 df24586d1fd625e02eeb8776a3e2bd7d
- SHA1 2ff81d93a2993746a7c7b989d2b651e883dd859c
- SHA512 e8891e4d61d3daeb445640d9c907fbe008e1d6d5cb8f9509b552c0701322776545f41eff772194d31f9e7cc59aff697c93ba1bd67265c3b0a51d62d3041470ba
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T195934A5F75E584BDF924527414AB17B0857BEA80127A97CB3B90CD7D883B12B5738383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-24_df24586d1fd625e02eeb8776a3e2bd7d_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_df24586d1fd625e02eeb8776a3e2bd7d_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-07-24_df24586d1fd625e02eeb8776a3e2bd7d_elex_glassworm_wannacry
- Size 90KB
- SHA256 5681245fdb95d61746831dab3c6c6e442f3bd66a76c285870c9b0c8573df2a56
- MD5 df24586d1fd625e02eeb8776a3e2bd7d
- SHA1 2ff81d93a2993746a7c7b989d2b651e883dd859c
- SHA512 e8891e4d61d3daeb445640d9c907fbe008e1d6d5cb8f9509b552c0701322776545f41eff772194d31f9e7cc59aff697c93ba1bd67265c3b0a51d62d3041470ba
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T195934A5F75E584BDF924527414AB17B0857BEA80127A97CB3B90CD7D883B12B5738383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory