General
- Target 2026-10-03_5ecbc3f870977dc1e8d6824ff0dfe945_elex_glassworm_wannacry
- Size 88KB
- Sample261004-nlabbaswas
- SHA256 87a638ae0e800464e7652a4c6f62d6c7ea6f04096db31d4f6707cc097706c487
- MD5 5ecbc3f870977dc1e8d6824ff0dfe945
- SHA1 2cbc62aa7c797e5676a8575dcb60850f7debe142
- SHA512 fbad7c29bfc6e0a92c5f42d28a09dcad51baf495b25d00033a647d72b0caa55a5d0238dc1ea25ac552e18e6c36a99ae0cd05719cdc2cf9e506970f75cd3acdd6
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTF:eshQvoLqNwDDhCeTF
- TLSH T14A933A9F75E584BDF914527414AB17B0857BA980127AABCB3F90CD7D883B12B5B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-03_5ecbc3f870977dc1e8d6824ff0dfe945_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-03_5ecbc3f870977dc1e8d6824ff0dfe945_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-03_5ecbc3f870977dc1e8d6824ff0dfe945_elex_glassworm_wannacry
- Size 88KB
- SHA256 87a638ae0e800464e7652a4c6f62d6c7ea6f04096db31d4f6707cc097706c487
- MD5 5ecbc3f870977dc1e8d6824ff0dfe945
- SHA1 2cbc62aa7c797e5676a8575dcb60850f7debe142
- SHA512 fbad7c29bfc6e0a92c5f42d28a09dcad51baf495b25d00033a647d72b0caa55a5d0238dc1ea25ac552e18e6c36a99ae0cd05719cdc2cf9e506970f75cd3acdd6
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTF:eshQvoLqNwDDhCeTF
- TLSH T14A933A9F75E584BDF914527414AB17B0857BA980127AABCB3F90CD7D883B12B5B38283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory