General
- Target 2026-10-05_45206de8f62b72c4c7dd4ed391081132_elex_glassworm_wannacry
- Size 91KB
- Sample261007-bzwegsaw2y
- SHA256 accbd2b31e2f3bfc61617de4c05bb52992af841577108e18f697798edd52be08
- MD5 45206de8f62b72c4c7dd4ed391081132
- SHA1 b8600a4a0ffff7ba4e8c0e9984ad9bce589461ca
- SHA512 5c90f889230527812ecd95b5453b529564637868201918163a17c8d6aabf675a70156365ea71e8cfd2d5f7214dbd5e11a01c4d8a9ba2df3392d65d18ab301acf
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0vwTyV+P:eshQvoLqNwDDhp+eO
- TLSH T173933A9F75E584FCE92462B414AB17B0817BAA84127B67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-05_45206de8f62b72c4c7dd4ed391081132_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_45206de8f62b72c4c7dd4ed391081132_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-05_45206de8f62b72c4c7dd4ed391081132_elex_glassworm_wannacry
- Size 91KB
- SHA256 accbd2b31e2f3bfc61617de4c05bb52992af841577108e18f697798edd52be08
- MD5 45206de8f62b72c4c7dd4ed391081132
- SHA1 b8600a4a0ffff7ba4e8c0e9984ad9bce589461ca
- SHA512 5c90f889230527812ecd95b5453b529564637868201918163a17c8d6aabf675a70156365ea71e8cfd2d5f7214dbd5e11a01c4d8a9ba2df3392d65d18ab301acf
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYDO1kzaXKynF0vwTyV+P:eshQvoLqNwDDhp+eO
- TLSH T173933A9F75E584FCE92462B414AB17B0817BAA84127B67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory