General
- Target 2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.9MB
- Sample260907-xvertsssa1
- SHA256 d9c171bf94007173dcdb821d7ee36cfa14faf5a2f3689067809de902fde6239b
- MD5 6974ce51559a68c8dbbab912c721f644
- SHA1 83d22e26993b435e41ca5e5eb0a1675ce856e43c
- SHA512 8915a1b7a4c6f31d056c1b8f0e75cb71356e2b4f0d69e686be665a5b84dafeac11d19e46a03841bb512098df018a11e6e1151f73e3726b11f9ee891e17a5a894
- SSDEEP 24576:dzvTP1IH4+Y8cLq6Xpn9GWayJT5bM9sBaw9S3zIp0T7OANf22ad+UFZAB5diU6c:dWYj8b3+87bfLK
- TLSH T1F836112839E96A2BD21AF1F1DFC6F197C203A269D1038B2F61B51B176210D116DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.9MB
- SHA256 d9c171bf94007173dcdb821d7ee36cfa14faf5a2f3689067809de902fde6239b
- MD5 6974ce51559a68c8dbbab912c721f644
- SHA1 83d22e26993b435e41ca5e5eb0a1675ce856e43c
- SHA512 8915a1b7a4c6f31d056c1b8f0e75cb71356e2b4f0d69e686be665a5b84dafeac11d19e46a03841bb512098df018a11e6e1151f73e3726b11f9ee891e17a5a894
- SSDEEP 24576:dzvTP1IH4+Y8cLq6Xpn9GWayJT5bM9sBaw9S3zIp0T7OANf22ad+UFZAB5diU6c:dWYj8b3+87bfLK
- TLSH T1F836112839E96A2BD21AF1F1DFC6F197C203A269D1038B2F61B51B176210D116DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2