General
- Target 2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.8MB
- Sample260822-pfdl8aeh95
- SHA256 05816c55ae1f01cfcbcee625d50a3d314f197c16cce758f14292bb8c14014212
- MD5 78d9192ce754adcd0ee58cd3944232e8
- SHA1 0b6b3ce19d2b95caaf8fe1f432e48e3df12c366d
- SHA512 d6fea34fa95f7c1bce28e905f8a4c77ebff36596581bfe84815a2f048cf3e912d068ee1485e2fac9a3817fd19d60cb0ab524fef89172a72982bce1754c22dabd
- SSDEEP 24576:iqaxCMBbDe6P8umtiOanVU4EIbAaBjQMz3twseE7OscTatFzUFZABTdcVJtp:it1D13RR7uT6F
- TLSH T1C636112839E96A2BD21AF1F1DFC6F197C203A269D1138B2F61B51B176210D106DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.8MB
- SHA256 05816c55ae1f01cfcbcee625d50a3d314f197c16cce758f14292bb8c14014212
- MD5 78d9192ce754adcd0ee58cd3944232e8
- SHA1 0b6b3ce19d2b95caaf8fe1f432e48e3df12c366d
- SHA512 d6fea34fa95f7c1bce28e905f8a4c77ebff36596581bfe84815a2f048cf3e912d068ee1485e2fac9a3817fd19d60cb0ab524fef89172a72982bce1754c22dabd
- SSDEEP 24576:iqaxCMBbDe6P8umtiOanVU4EIbAaBjQMz3twseE7OscTatFzUFZABTdcVJtp:it1D13RR7uT6F
- TLSH T1C636112839E96A2BD21AF1F1DFC6F197C203A269D1138B2F61B51B176210D106DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2