General
- Target 2026-10-21_cd713f3b1ebd7077d0dcd46f530a54f7_elex_glassworm_wannacry
- Size 89KB
- Sample261022-kegv2ass2k
- SHA256 213ac44d81a0096525a3320ae60c69350493c3e12263b54631360cc81fba7ae4
- MD5 cd713f3b1ebd7077d0dcd46f530a54f7
- SHA1 6f141c0c7ebbc57bd06e2843045055e308464492
- SHA512 cde8f0a6feef3e56dfb95dd8e9bf1cd7c48f5d9ce97a9743a5ef914e81c128d547bb936e209bee64b629a1dee84d5f5a34107728fab041f2ff983014ca012938
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T17C934A9F75E584BDFD24527414AB17B0857BAA80027AA7CB3F94CD7D843B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-21_cd713f3b1ebd7077d0dcd46f530a54f7_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_cd713f3b1ebd7077d0dcd46f530a54f7_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-10-21_cd713f3b1ebd7077d0dcd46f530a54f7_elex_glassworm_wannacry
- Size 89KB
- SHA256 213ac44d81a0096525a3320ae60c69350493c3e12263b54631360cc81fba7ae4
- MD5 cd713f3b1ebd7077d0dcd46f530a54f7
- SHA1 6f141c0c7ebbc57bd06e2843045055e308464492
- SHA512 cde8f0a6feef3e56dfb95dd8e9bf1cd7c48f5d9ce97a9743a5ef914e81c128d547bb936e209bee64b629a1dee84d5f5a34107728fab041f2ff983014ca012938
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vT:eshQvoLqNwDDhCeT
- TLSH T17C934A9F75E584BDFD24527414AB17B0857BAA80027AA7CB3F94CD7D843B12B5738283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory