General
- Target 2026-10-16_bc44f13334f25e1a9f216c46c43dffb3_elex_glassworm_wannacry
- Size 87KB
- Sample261017-j2ethsct81
- SHA256 d11330b6c9bd0af83c485cca25e93046bda156ebbb7d247379d6d440dcbdd5d9
- MD5 bc44f13334f25e1a9f216c46c43dffb3
- SHA1 9ee3012e5b8929548aa8db307f7d422f6f4b93b2
- SHA512 53588e91b23f959159b8902f771fcedb622ec62d9fce83eeaeb31a9facaf16d279aac6d2a161e2171bb8f7353fd6480068525b9985962f713dbec4da0e856c46
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T167933A5F75E584BDFD24527418AB17B0857BAA80127A97CB3F90CD7D883B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_bc44f13334f25e1a9f216c46c43dffb3_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_bc44f13334f25e1a9f216c46c43dffb3_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-16_bc44f13334f25e1a9f216c46c43dffb3_elex_glassworm_wannacry
- Size 87KB
- SHA256 d11330b6c9bd0af83c485cca25e93046bda156ebbb7d247379d6d440dcbdd5d9
- MD5 bc44f13334f25e1a9f216c46c43dffb3
- SHA1 9ee3012e5b8929548aa8db307f7d422f6f4b93b2
- SHA512 53588e91b23f959159b8902f771fcedb622ec62d9fce83eeaeb31a9facaf16d279aac6d2a161e2171bb8f7353fd6480068525b9985962f713dbec4da0e856c46
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T167933A5F75E584BDFD24527418AB17B0857BAA80127A97CB3F90CD7D883B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory