General
- Target 2026-08-01_ac143e14702f8a6cce5362c5659d90c8_elex_glassworm_wannacry
- Size 211KB
- Sample260802-acf6lsaj81
- SHA256 da81824adcac29646214769e953ee2fd1f118440d1bfae2f42768d293854fbb4
- MD5 ac143e14702f8a6cce5362c5659d90c8
- SHA1 8bab560850b0f1372751fe45babc97f1e814383d
- SHA512 aed5656061c87df947f8f0172dd4d228fb2ef5fc5724e13642c47914e1832c6fbbaef21c185bf5ad19708355b49bf87115a55a30bb0c810d6d7812a4ab9751d9
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qoS:jkwcEO28wzmJje7Rsei5dhoS
- TLSH T1C2246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_ac143e14702f8a6cce5362c5659d90c8_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_ac143e14702f8a6cce5362c5659d90c8_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ac143e14702f8a6cce5362c5659d90c8_elex_glassworm_wannacry
- Size 211KB
- SHA256 da81824adcac29646214769e953ee2fd1f118440d1bfae2f42768d293854fbb4
- MD5 ac143e14702f8a6cce5362c5659d90c8
- SHA1 8bab560850b0f1372751fe45babc97f1e814383d
- SHA512 aed5656061c87df947f8f0172dd4d228fb2ef5fc5724e13642c47914e1832c6fbbaef21c185bf5ad19708355b49bf87115a55a30bb0c810d6d7812a4ab9751d9
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qoS:jkwcEO28wzmJje7Rsei5dhoS
- TLSH T1C2246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1