General
- Target 2026-08-05_a5dcc42d020b940082dc62423a0c4995_destroyer_elex_glassworm_ngrbot_wannacry
- Size 47KB
- Sample260805-k1622scq71
- SHA256 d0d0fa269802e1a47d18433a15a8f74f85c7d901b1ca2701a860acbdbed4332b
- MD5 a5dcc42d020b940082dc62423a0c4995
- SHA1 eb974060087f23c0c73fd33353c97511c2f81b09
- SHA512 51dbfb4eb583dab972e0e836d0364698930be5425b44b392c184153bb4998f124ba153d21765319a01eca0720194add72a87221058f41ccbace6853bba8b2756
- SSDEEP 768:zh9rjZ6fW/N9HQ2m28P4s//w4YC1XXGblfA05KFc3n:99rEfKHF8AsQ4YEXGblf95uc3n
- TLSH T1F323E60437FD8511F1BF4ABA4DB196119B31B8979C22D78E0AD5058E1AB3740CEA8FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_a5dcc42d020b940082dc62423a0c4995_destroyer_elex_glassworm_ngrbot_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_a5dcc42d020b940082dc62423a0c4995_destroyer_elex_glassworm_ngrbot_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
nanocore
Version
-
1.2.2.0
C2
-
http://smartlands.io
Mutex
-
ac7e2f05-8df7-4c55-8841-78385f6bb064
Attributes
-
c2_url
http://smartlands.io
-
default_group
xoilac
-
primary_dns
ali.ns.cloudflare.com
-
secondary_dns
woz.ns.cloudflare.com
-
version
1.2.2.0
Targets
-
- Target 2026-08-05_a5dcc42d020b940082dc62423a0c4995_destroyer_elex_glassworm_ngrbot_wannacry
- Size 47KB
- SHA256 d0d0fa269802e1a47d18433a15a8f74f85c7d901b1ca2701a860acbdbed4332b
- MD5 a5dcc42d020b940082dc62423a0c4995
- SHA1 eb974060087f23c0c73fd33353c97511c2f81b09
- SHA512 51dbfb4eb583dab972e0e836d0364698930be5425b44b392c184153bb4998f124ba153d21765319a01eca0720194add72a87221058f41ccbace6853bba8b2756
- SSDEEP 768:zh9rjZ6fW/N9HQ2m28P4s//w4YC1XXGblfA05KFc3n:99rEfKHF8AsQ4YEXGblf95uc3n
- TLSH T1F323E60437FD8511F1BF4ABA4DB196119B31B8979C22D78E0AD5058E1AB3740CEA8FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10