2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry
Size 28KB
Sample260727-2wcfbafl7v
SHA256 5123181f15cd353fd2bceedbcf367f0bb95dff7289b1bba221cd79e770b6a6d1
MD5 38fb71d3c615b137d8e910af559f07d5
SHA1 2a0519c5da8de83473788bfa7ed870a78a17946d
SHA512 3b6f5107f20facafac56a58c7b5fb46a6ddb67546e1db5ee39f7d5068e5266ba571b37fcec74cf126d4c8beebee19bee1a3218af2fcc6a75ed8cb13a37c369bb
SSDEEP 768:3PJadenAqtYQnaXH96rV2kllriFqR7Atmqfvfj7sN:3PnAClrVLTrEqNAxvXsN
TLSH
T176D239873A048831EB9180315D606F75A7F6EC3549A68947F384ABDE9D30BC5EA2174F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry

File Explorer

2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry

.exe 28KB

2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry

IMPHASH d3f4a309051d3a10e862d10883816727
SHA256 5123181f15cd353fd2bceedbcf367f0bb95dff7289b1bba221cd79e770b6a6d1
MD5 38fb71d3c615b137d8e910af559f07d5
SHA1 2a0519c5da8de83473788bfa7ed870a78a17946d
SHA512 3b6f5107f20facafac56a58c7b5fb46a6ddb67546e1db5ee39f7d5068e5266ba571b37fcec74cf126d4c8beebee19bee1a3218af2fcc6a75ed8cb13a37c369bb
SSDEEP 768:3PJadenAqtYQnaXH96rV2kllriFqR7Atmqfvfj7sN:3PnAClrVLTrEqNAxvXsN
TLSH
T176D239873A048831EB9180315D606F75A7F6EC3549A68947F384ABDE9D30BC5EA2174F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_mbsnbcmp isalpha __dllonexit _onexit ??1type_info@@UAE@XZ _exit _XcptFilter _acmdln atoi _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp localtime strftime _mbscmp _itoa _mbsicmp exit strcat _mbsrev rand _mbschr _mbsnbcpy _ftol time difftime _mbsstr ftell fseek fputs sprintf memmove _mbsinc ??0exception@@QAE@ABQBD@Z ??1exception@@UAE@XZ _CxxThrowException ??0exception@@QAE@ABV0@@Z fopen fclose fread fwrite _EH_prolog __CxxFrameHandler strcpy _mbsrchr free malloc _msize realloc strlen memcpy ??2@YAPAXI@Z memset __getmainargs ??3@YAXPAX@Z

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc

advapi32

SetSecurityDescriptorDacl RegSetValueExA RegCloseKey RegCreateKeyExA RegOpenKeyExA RegDeleteValueA GetUserNameA InitializeSecurityDescriptor

ws2_32

send closesocket htons inet_addr socket recv WSAGetLastError WSAStartup gethostname gethostbyname WSACleanup connect

kernel32

GetFileSize WriteFile CloseHandle GetModuleFileNameA CreateEventA OpenEventA GetVersionExA SetFileTime Sleep WaitForSingleObject GetTempFileNameA GetTempPathA GetModuleHandleA GetProcAddress LoadLibraryA CreateThread GetComputerNameA GetStartupInfoA GetLastError CreateFileA FindClose FindNextFileA FindFirstFileA GetFileAttributesA FreeLibrary SetFileAttributesA DeleteFileA CreateProcessA GetFileTime GetSystemDirectoryA GetPrivateProfileStringA

user32

MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_38fb71d3c615b137d8e910af559f07d5_elex_glassworm_wannacry

msvcrt

shell32

advapi32

ws2_32

kernel32

user32

generic