General
- Target 2026-09-05_d63d678d283c5ae49289a09ce9b36dc4_elex_glassworm_hawkeye_remcos_vidar_wannacry
- Size 9.2MB
- Sample260907-lsp91agb49
- SHA256 30e106dc38e223f2eb7d803aceb7c0101540383fa69b01040b29447f7d6b298a
- MD5 d63d678d283c5ae49289a09ce9b36dc4
- SHA1 4bafbf55c9bf21435d6b581fcc42d21cb9bc07ad
- SHA512 40f96e332520b4270828ad2933ebe11d35a9d34e24165ac674b05f8c77eb07b5ca3503b009c2eb954ac9ec73d14e12bea8819258244174d06b6897443b482a39
- SSDEEP 49152:U+Es+ES+EzD+Es+ES+EN+Es+ES+Es+ES+EzD+Es+ES+EKqatglS+Es+ES+EzD+Eq:zMMMM87p
- TLSH T149A62A05F98740B1E82B01B04DDBD3BF8A70BA218B128EEBF74D875FA933B919534655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_d63d678d283c5ae49289a09ce9b36dc4_elex_glassworm_hawkeye_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_d63d678d283c5ae49289a09ce9b36dc4_elex_glassworm_hawkeye_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_d63d678d283c5ae49289a09ce9b36dc4_elex_glassworm_hawkeye_remcos_vidar_wannacry
- Size 9.2MB
- SHA256 30e106dc38e223f2eb7d803aceb7c0101540383fa69b01040b29447f7d6b298a
- MD5 d63d678d283c5ae49289a09ce9b36dc4
- SHA1 4bafbf55c9bf21435d6b581fcc42d21cb9bc07ad
- SHA512 40f96e332520b4270828ad2933ebe11d35a9d34e24165ac674b05f8c77eb07b5ca3503b009c2eb954ac9ec73d14e12bea8819258244174d06b6897443b482a39
- SSDEEP 49152:U+Es+ES+EzD+Es+ES+EN+Es+ES+Es+ES+EzD+Es+ES+EKqatglS+Es+ES+EzD+Eq:zMMMM87p
- TLSH T149A62A05F98740B1E82B01B04DDBD3BF8A70BA218B128EEBF74D875FA933B919534655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1