General
- Target 2026-08-26_eefc03b8efa294fdd1ae5cee978829f3_elex_glassworm_wannacry
- Size 194KB
- Sample260827-d642bayhpc
- SHA256 61bedfbd85316ed976e0214d063686d5998f24896336e426a1915e463cbaf3f7
- MD5 eefc03b8efa294fdd1ae5cee978829f3
- SHA1 8c6f2acfbebfb57033cb9b8759aea25371794744
- SHA512 2573aed34a60a7860ca959ab191de675718082c6f6c36bfa1f6d9f35ce3027cace67972ebf135a556983261d1d856f8ffe5808a455db552472e23aad2b8066f4
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTP:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KQ
- TLSH T195147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-26_eefc03b8efa294fdd1ae5cee978829f3_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_eefc03b8efa294fdd1ae5cee978829f3_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_eefc03b8efa294fdd1ae5cee978829f3_elex_glassworm_wannacry
- Size 194KB
- SHA256 61bedfbd85316ed976e0214d063686d5998f24896336e426a1915e463cbaf3f7
- MD5 eefc03b8efa294fdd1ae5cee978829f3
- SHA1 8c6f2acfbebfb57033cb9b8759aea25371794744
- SHA512 2573aed34a60a7860ca959ab191de675718082c6f6c36bfa1f6d9f35ce3027cace67972ebf135a556983261d1d856f8ffe5808a455db552472e23aad2b8066f4
- SSDEEP 3072:8Ly2Kerc64CiGImStfHLREJ5itGNbg5uF1dphh1PBDp9Dwqo/zc/9yH8Ka193eTP:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KQ
- TLSH T195147CDAF7623112C45B0A39A7665F189838EC760393651966C0F16C2C7B8B9832FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1