General
- Target 2026-08-08_978a1c08fe19e8e5f0967ab2dbc2c07c_elex_glassworm_wannacry
- Size 1.5MB
- Sample260808-fgqthazhra
- SHA256 e05b454284c4bae4f8b5260b9678ff96750b926a16fff631997b90324fdddd00
- MD5 978a1c08fe19e8e5f0967ab2dbc2c07c
- SHA1 3f2afca6dfa646f881e1c2cfd8bbb24b0d887412
- SHA512 779e51832f23740f2d949d085e8762700016b494ec427c470458c4a01d3acbd931def9090e83df9f8d19d8c4e756415bd55074d8cde4a5d70f93258c1ce4d926
- SSDEEP 768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
- TLSH T17F752B9FB5D984BCFD24127414AB1B70857B6D90027A9ACB3BE1CE79843B1365B3C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_978a1c08fe19e8e5f0967ab2dbc2c07c_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_978a1c08fe19e8e5f0967ab2dbc2c07c_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103601
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-08_978a1c08fe19e8e5f0967ab2dbc2c07c_elex_glassworm_wannacry
- Size 1.5MB
- SHA256 e05b454284c4bae4f8b5260b9678ff96750b926a16fff631997b90324fdddd00
- MD5 978a1c08fe19e8e5f0967ab2dbc2c07c
- SHA1 3f2afca6dfa646f881e1c2cfd8bbb24b0d887412
- SHA512 779e51832f23740f2d949d085e8762700016b494ec427c470458c4a01d3acbd931def9090e83df9f8d19d8c4e756415bd55074d8cde4a5d70f93258c1ce4d926
- SSDEEP 768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
- TLSH T17F752B9FB5D984BCFD24127414AB1B70857B6D90027A9ACB3BE1CE79843B1365B3C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory