General
- Target 2026-08-02_838fc422abb5c55c322d2eb090dc6447_elex_glassworm_wannacry
- Size 85KB
- Sample260802-gns3waea33
- SHA256 4936e4870c29868745778227626a460764a9941b358a49d31d328d953b00bc4a
- MD5 838fc422abb5c55c322d2eb090dc6447
- SHA1 5a427bc556e4d3f8723f2cf34b11c34475b048db
- SHA512 c9f1a5182186c46cd40f5674298b5384d566cc24e15b1f38fe3c1e1927f008d62b6b8e806d6aae1b8f9069701de4c5ff54762cc94542bf22fa3b14f1517601cb
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T19D833A9F75E584FDF924527414AB17B0857BAA80127A9BCB3F90CD7D883B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_838fc422abb5c55c322d2eb090dc6447_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_838fc422abb5c55c322d2eb090dc6447_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-02_838fc422abb5c55c322d2eb090dc6447_elex_glassworm_wannacry
- Size 85KB
- SHA256 4936e4870c29868745778227626a460764a9941b358a49d31d328d953b00bc4a
- MD5 838fc422abb5c55c322d2eb090dc6447
- SHA1 5a427bc556e4d3f8723f2cf34b11c34475b048db
- SHA512 c9f1a5182186c46cd40f5674298b5384d566cc24e15b1f38fe3c1e1927f008d62b6b8e806d6aae1b8f9069701de4c5ff54762cc94542bf22fa3b14f1517601cb
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T19D833A9F75E584FDF924527414AB17B0857BAA80127A9BCB3F90CD7D883B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory