General
- Target 2026-08-09_a70613e72c689dad43f1bf9fe21b1b3a_elex_glassworm_wannacry
- Size 97KB
- Sample260809-tp1wbst1cw
- SHA256 1786f447e4c0e516b4ccbbeb14e021732f9aaaecc068642e3211ceafeb248a06
- MD5 a70613e72c689dad43f1bf9fe21b1b3a
- SHA1 515da7c6182b4f61a763966351d837293bdfb46a
- SHA512 9966a0915e294baeca3d2fa04011c7abc863684a7cd418fa202bab8a515f5d5b4e9a63e95d8486b92e0b7672ece9a3c58296ada294d3b5358a548393ac518f94
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTHxU:eshQvoLqNwDDhCeT
- TLSH T1B2A3395F75E584BDF9246274146B0BB18577E980127AABDB3BE1CD3D843B12B1B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_a70613e72c689dad43f1bf9fe21b1b3a_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a70613e72c689dad43f1bf9fe21b1b3a_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-09_a70613e72c689dad43f1bf9fe21b1b3a_elex_glassworm_wannacry
- Size 97KB
- SHA256 1786f447e4c0e516b4ccbbeb14e021732f9aaaecc068642e3211ceafeb248a06
- MD5 a70613e72c689dad43f1bf9fe21b1b3a
- SHA1 515da7c6182b4f61a763966351d837293bdfb46a
- SHA512 9966a0915e294baeca3d2fa04011c7abc863684a7cd418fa202bab8a515f5d5b4e9a63e95d8486b92e0b7672ece9a3c58296ada294d3b5358a548393ac518f94
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTHxU:eshQvoLqNwDDhCeT
- TLSH T1B2A3395F75E584BDF9246274146B0BB18577E980127AABDB3BE1CD3D843B12B1B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory