General
- Target 2026-08-01_479658b9246415342cfcd56c31d3da37_elex_glassworm_wannacry
- Size 84KB
- Sample260802-et7gcas1a1
- SHA256 f0697aaa056116e3e01cb05846da4577d3d1ef126cdb66fab23223e878ba897d
- MD5 479658b9246415342cfcd56c31d3da37
- SHA1 fe855af68a1cc62a3ca76f13f138fe16e3815976
- SHA512 0cb949c61e982e4fca4b0031c9b2b55916954a535b5b3274137e190a26aa55103a557f1dc9d90965299809d7b0b9eeb005b5086bc0f8c37b93f293e2db008e33
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0v:eshQvoLqNwDDhCe
- TLSH T14F834A9F74E584FDF92462B414AB17B0857BAA84127A67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_479658b9246415342cfcd56c31d3da37_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_479658b9246415342cfcd56c31d3da37_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-01_479658b9246415342cfcd56c31d3da37_elex_glassworm_wannacry
- Size 84KB
- SHA256 f0697aaa056116e3e01cb05846da4577d3d1ef126cdb66fab23223e878ba897d
- MD5 479658b9246415342cfcd56c31d3da37
- SHA1 fe855af68a1cc62a3ca76f13f138fe16e3815976
- SHA512 0cb949c61e982e4fca4b0031c9b2b55916954a535b5b3274137e190a26aa55103a557f1dc9d90965299809d7b0b9eeb005b5086bc0f8c37b93f293e2db008e33
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0v:eshQvoLqNwDDhCe
- TLSH T14F834A9F74E584FDF92462B414AB17B0857BAA84127A67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory