General
- Target 2026-10-22_d50e58cb6c2a8aeae60be9cba9bf012a_elex_glassworm_wannacry
- Size 200KB
- Sample261023-xc5wasds51
- SHA256 443d88f07bf96e5b2fa534eb0574dcdbb055c4f52543f5fb703d9a7782d0ca44
- MD5 d50e58cb6c2a8aeae60be9cba9bf012a
- SHA1 56b389e0d05d918d617207bd6fe2cf001cbbc262
- SHA512 d0b270e2e0b039ffb985cad1b644ba8edb5b8f5526afff35b07f9f975f8a895a16d350c4b163b860dbbb8a4922f9bda35bf9849282c09163ebfd09c509d2fe88
- SSDEEP 6144:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KT6:8kwcEz5dhoyvT6
- TLSH T153148C8AF7623015C55B4639A7AA5F189838EC720393651966C0F16C2C7BCB9872FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_d50e58cb6c2a8aeae60be9cba9bf012a_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_d50e58cb6c2a8aeae60be9cba9bf012a_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_d50e58cb6c2a8aeae60be9cba9bf012a_elex_glassworm_wannacry
- Size 200KB
- SHA256 443d88f07bf96e5b2fa534eb0574dcdbb055c4f52543f5fb703d9a7782d0ca44
- MD5 d50e58cb6c2a8aeae60be9cba9bf012a
- SHA1 56b389e0d05d918d617207bd6fe2cf001cbbc262
- SHA512 d0b270e2e0b039ffb985cad1b644ba8edb5b8f5526afff35b07f9f975f8a895a16d350c4b163b860dbbb8a4922f9bda35bf9849282c09163ebfd09c509d2fe88
- SSDEEP 6144:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KT6:8kwcEz5dhoyvT6
- TLSH T153148C8AF7623015C55B4639A7AA5F189838EC720393651966C0F16C2C7BCB9872FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1