General
- Target 2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.9MB
- Sample260907-xvertsssa1
- SHA256 d9c171bf94007173dcdb821d7ee36cfa14faf5a2f3689067809de902fde6239b
- MD5 6974ce51559a68c8dbbab912c721f644
- SHA1 83d22e26993b435e41ca5e5eb0a1675ce856e43c
- SHA512 8915a1b7a4c6f31d056c1b8f0e75cb71356e2b4f0d69e686be665a5b84dafeac11d19e46a03841bb512098df018a11e6e1151f73e3726b11f9ee891e17a5a894
- SSDEEP 24576:dzvTP1IH4+Y8cLq6Xpn9GWayJT5bM9sBaw9S3zIp0T7OANf22ad+UFZAB5diU6c:dWYj8b3+87bfLK
- TLSH T1F836112839E96A2BD21AF1F1DFC6F197C203A269D1038B2F61B51B176210D116DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6974ce51559a68c8dbbab912c721f644_derusbi_elex_glassworm_lockbit_wannacry
- Size 4.9MB
- SHA256 d9c171bf94007173dcdb821d7ee36cfa14faf5a2f3689067809de902fde6239b
- MD5 6974ce51559a68c8dbbab912c721f644
- SHA1 83d22e26993b435e41ca5e5eb0a1675ce856e43c
- SHA512 8915a1b7a4c6f31d056c1b8f0e75cb71356e2b4f0d69e686be665a5b84dafeac11d19e46a03841bb512098df018a11e6e1151f73e3726b11f9ee891e17a5a894
- SSDEEP 24576:dzvTP1IH4+Y8cLq6Xpn9GWayJT5bM9sBaw9S3zIp0T7OANf22ad+UFZAB5diU6c:dWYj8b3+87bfLK
- TLSH T1F836112839E96A2BD21AF1F1DFC6F197C203A269D1038B2F61B51B176210D116DD7E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2