General
- Target 2026-08-31_c53dbe5c2e06bd376d66678aaf111a96_elex_glassworm_wannacry
- Size 89KB
- Sample260831-r93vbaha92
- SHA256 fc0238aee60d473724b3e76437a0dcef2f2bd9fc02e1cf2ef60ef56d46cb90cf
- MD5 c53dbe5c2e06bd376d66678aaf111a96
- SHA1 1bbb9071e63906a86527430ca7b0db342e09d833
- SHA512 9c19a7958837c99ec887b83cde472d62687b08f4f24b10e126520bc5f3950d9ffc6c3b131a4356318edfe9b111515b1ee041389c4e103dbc3be1f9b1eeb7cb5a
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDjaXKynF0vm:eshQvoLqNwDDhOem
- TLSH T1C6933A9F75D584FDFD1452B414AB17B0857BA980127A9BCB3F90CE79883B12B5B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_c53dbe5c2e06bd376d66678aaf111a96_elex_glassworm_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_c53dbe5c2e06bd376d66678aaf111a96_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-08-31_c53dbe5c2e06bd376d66678aaf111a96_elex_glassworm_wannacry
- Size 89KB
- SHA256 fc0238aee60d473724b3e76437a0dcef2f2bd9fc02e1cf2ef60ef56d46cb90cf
- MD5 c53dbe5c2e06bd376d66678aaf111a96
- SHA1 1bbb9071e63906a86527430ca7b0db342e09d833
- SHA512 9c19a7958837c99ec887b83cde472d62687b08f4f24b10e126520bc5f3950d9ffc6c3b131a4356318edfe9b111515b1ee041389c4e103dbc3be1f9b1eeb7cb5a
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDjaXKynF0vm:eshQvoLqNwDDhOem
- TLSH T1C6933A9F75D584FDFD1452B414AB17B0857BA980127A9BCB3F90CE79883B12B5B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory