General
- Target 2026-10-03_41843334e09e7797bcf45b72eb550578_elex_glassworm_wannacry
- Size 94KB
- Sample261004-rd2mdatz3k
- SHA256 9c413ca89b0f4aed89adf216761479b2c6683e54933046b9874961bf12599410
- MD5 41843334e09e7797bcf45b72eb550578
- SHA1 15d287447da00a6d0a5000bbe13dbe40a3ad19fb
- SHA512 c81ed6c249c06ce9441a134d61aa84a3b71e91308e258248dd746935fd2ee7d327c9d85c2206b69ce1dbdfd16d12bc06956ffb7ae65ed9b0207292603892844e
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTa:eshQvoLqNwDDhCeTa
- TLSH T112934A5F75E684FDFD24527414AB17B0857BAA80127A5BCB3B91CD7E883B1274738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-03_41843334e09e7797bcf45b72eb550578_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-03_41843334e09e7797bcf45b72eb550578_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-03_41843334e09e7797bcf45b72eb550578_elex_glassworm_wannacry
- Size 94KB
- SHA256 9c413ca89b0f4aed89adf216761479b2c6683e54933046b9874961bf12599410
- MD5 41843334e09e7797bcf45b72eb550578
- SHA1 15d287447da00a6d0a5000bbe13dbe40a3ad19fb
- SHA512 c81ed6c249c06ce9441a134d61aa84a3b71e91308e258248dd746935fd2ee7d327c9d85c2206b69ce1dbdfd16d12bc06956ffb7ae65ed9b0207292603892844e
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vTa:eshQvoLqNwDDhCeTa
- TLSH T112934A5F75E684FDFD24527414AB17B0857BAA80127A5BCB3B91CD7E883B1274738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory