General
- Target 2026-10-02_506535aa5c6ff8d926b6670423e7e9d3_elex_glassworm_wannacry
- Size 2.0MB
- Sample261003-p2cxtazv2k
- SHA256 52ee35e82142c5ba9c02f39c4ac8661963a59efa32615eddf24af7a28a6df44c
- MD5 506535aa5c6ff8d926b6670423e7e9d3
- SHA1 58e4c5a04d1cb2d6538814cb23121b67a997e0ce
- SHA512 acdf2ac873060e262bc1910a2e4ae8c4ec35b1618543a7afce11f075b7f6952d18e5688fc52b3324a0a2d8bced630db8c0e0c92db95cfac9195ce1e2a7bf52c6
- SSDEEP 768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
- TLSH T1C7A52B9FB5D984BCFD24127414AB1B70857B6D90027A9ACB3BE1CE79843B1365B3C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_506535aa5c6ff8d926b6670423e7e9d3_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_506535aa5c6ff8d926b6670423e7e9d3_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103601
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-02_506535aa5c6ff8d926b6670423e7e9d3_elex_glassworm_wannacry
- Size 2.0MB
- SHA256 52ee35e82142c5ba9c02f39c4ac8661963a59efa32615eddf24af7a28a6df44c
- MD5 506535aa5c6ff8d926b6670423e7e9d3
- SHA1 58e4c5a04d1cb2d6538814cb23121b67a997e0ce
- SHA512 acdf2ac873060e262bc1910a2e4ae8c4ec35b1618543a7afce11f075b7f6952d18e5688fc52b3324a0a2d8bced630db8c0e0c92db95cfac9195ce1e2a7bf52c6
- SSDEEP 768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
- TLSH T1C7A52B9FB5D984BCFD24127414AB1B70857B6D90027A9ACB3BE1CE79843B1365B3C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory