General
- Target 2026-08-02_dcbb8dce7964813dd44f66233f4b4eb4_elex_glassworm_wannacry
- Size 90KB
- Sample260802-mn5pkaxyfs
- SHA256 972564030551358a3d57fc48d168ffb61834dd2ed1d1222594a25192dccc063d
- MD5 dcbb8dce7964813dd44f66233f4b4eb4
- SHA1 d6b70342d91ff1f0560f812f287ba172e2b66b23
- SHA512 818b921b0f3d69e8b18a64b6f3a251acfef630b1d5f70899ce4b8f5d014ee04be0941ebe468d8de406718abbe08ec86779cb4ed6f5e0b3d95fc1f84b9bf42fbf
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0v:eshQvoLqNwDDhp+e
- TLSH T1BE93499F74D584FDF91462B414AB17B0817BAA80527B6BCB3BA0CD79843B12B573C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_dcbb8dce7964813dd44f66233f4b4eb4_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_dcbb8dce7964813dd44f66233f4b4eb4_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-02_dcbb8dce7964813dd44f66233f4b4eb4_elex_glassworm_wannacry
- Size 90KB
- SHA256 972564030551358a3d57fc48d168ffb61834dd2ed1d1222594a25192dccc063d
- MD5 dcbb8dce7964813dd44f66233f4b4eb4
- SHA1 d6b70342d91ff1f0560f812f287ba172e2b66b23
- SHA512 818b921b0f3d69e8b18a64b6f3a251acfef630b1d5f70899ce4b8f5d014ee04be0941ebe468d8de406718abbe08ec86779cb4ed6f5e0b3d95fc1f84b9bf42fbf
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0v:eshQvoLqNwDDhp+e
- TLSH T1BE93499F74D584FDF91462B414AB17B0817BAA80527B6BCB3BA0CD79843B12B573C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory