General
- Target 2026-08-10_15b099384c910a76fb36c71aa2abf666_elex_glassworm_wannacry
- Size 194KB
- Sample260810-s2ps6acl4x
- SHA256 4a66513c842db2e93b3a9aa12ba062581a2326aad1e22a1820d28c994e3bc486
- MD5 15b099384c910a76fb36c71aa2abf666
- SHA1 d427bcf3e57fbd2503b545823d97cb4c4323946d
- SHA512 dd2e010a11911dc4ba7f94c58983c82428defd9883775a6c0db18e0c6402587faebbe35c5a4391a4a905545bbadfea540a79d1838baa722fba47fd64664148e2
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTE:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kr
- TLSH T1E4147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_15b099384c910a76fb36c71aa2abf666_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_15b099384c910a76fb36c71aa2abf666_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_15b099384c910a76fb36c71aa2abf666_elex_glassworm_wannacry
- Size 194KB
- SHA256 4a66513c842db2e93b3a9aa12ba062581a2326aad1e22a1820d28c994e3bc486
- MD5 15b099384c910a76fb36c71aa2abf666
- SHA1 d427bcf3e57fbd2503b545823d97cb4c4323946d
- SHA512 dd2e010a11911dc4ba7f94c58983c82428defd9883775a6c0db18e0c6402587faebbe35c5a4391a4a905545bbadfea540a79d1838baa722fba47fd64664148e2
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTE:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5Kr
- TLSH T1E4147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1