General
- Target 2026-08-04_a97acf116daada40a7abfe31fce45c53_elex_glassworm_wannacry
- Size 211KB
- Sample260804-gnjjfaea34
- SHA256 f9b6acf4e8481223f4905cb79fba51a13bcf06d774a60231d6658dd7bd5fbf02
- MD5 a97acf116daada40a7abfe31fce45c53
- SHA1 2f0891b385cc84132a88e59654c75a3b202318f5
- SHA512 900be0b53397924ab15440593131787e3da8511495b91b23c0b8e3c396156085b9f8c647cf2728ec2d7cf6f2361d468d1e6df40f061d537be136ef3ce685c022
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo8:jkwcEO28wzmJje7Rsei5dho8
- TLSH T1C4246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_a97acf116daada40a7abfe31fce45c53_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a97acf116daada40a7abfe31fce45c53_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a97acf116daada40a7abfe31fce45c53_elex_glassworm_wannacry
- Size 211KB
- SHA256 f9b6acf4e8481223f4905cb79fba51a13bcf06d774a60231d6658dd7bd5fbf02
- MD5 a97acf116daada40a7abfe31fce45c53
- SHA1 2f0891b385cc84132a88e59654c75a3b202318f5
- SHA512 900be0b53397924ab15440593131787e3da8511495b91b23c0b8e3c396156085b9f8c647cf2728ec2d7cf6f2361d468d1e6df40f061d537be136ef3ce685c022
- SSDEEP 6144:jLy2Kwc64YIK628wzQocJje7RsUmWi5F1hLPBp6qo8:jkwcEO28wzmJje7Rsei5dho8
- TLSH T1C4246B5AF7A220E5C55A82348ABB4731C634FC2414637B3E1780F6291DB6CA59F1AFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1