General
- Target 2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.8MB
- Sample260822-pfdl8aeh95
- SHA256 05816c55ae1f01cfcbcee625d50a3d314f197c16cce758f14292bb8c14014212
- MD5 78d9192ce754adcd0ee58cd3944232e8
- SHA1 0b6b3ce19d2b95caaf8fe1f432e48e3df12c366d
- SHA512 d6fea34fa95f7c1bce28e905f8a4c77ebff36596581bfe84815a2f048cf3e912d068ee1485e2fac9a3817fd19d60cb0ab524fef89172a72982bce1754c22dabd
- SSDEEP 24576:iqaxCMBbDe6P8umtiOanVU4EIbAaBjQMz3twseE7OscTatFzUFZABTdcVJtp:it1D13RR7uT6F
- TLSH T1C636112839E96A2BD21AF1F1DFC6F197C203A269D1138B2F61B51B176210D106DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_78d9192ce754adcd0ee58cd3944232e8_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.8MB
- SHA256 05816c55ae1f01cfcbcee625d50a3d314f197c16cce758f14292bb8c14014212
- MD5 78d9192ce754adcd0ee58cd3944232e8
- SHA1 0b6b3ce19d2b95caaf8fe1f432e48e3df12c366d
- SHA512 d6fea34fa95f7c1bce28e905f8a4c77ebff36596581bfe84815a2f048cf3e912d068ee1485e2fac9a3817fd19d60cb0ab524fef89172a72982bce1754c22dabd
- SSDEEP 24576:iqaxCMBbDe6P8umtiOanVU4EIbAaBjQMz3twseE7OscTatFzUFZABTdcVJtp:it1D13RR7uT6F
- TLSH T1C636112839E96A2BD21AF1F1DFC6F197C203A269D1138B2F61B51B176210D106DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2