General
- Target 2026-10-25_a1be63f318b8115ed0f119be15267240_elex_glassworm_wannacry
- Size 200KB
- Sample261026-wbpx1sbf32
- SHA256 a5497172ea90d43d179afffa5df23e1f969e6ddfde3e14313d17b6b8be0b2201
- MD5 a1be63f318b8115ed0f119be15267240
- SHA1 ccf7b133696b8fbdc2fef4ae1e77d6b1b2720d56
- SHA512 09004e7ea8141c08f06781f9df98c4dfdc39bb07ceebbf7df5cc5ba693ddbdac458a607a82c3f6c58f845d022312ed763abd9d006fd598891b777cb2898e935a
- SSDEEP 6144:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KTI:8kwcEz5dhoyvTI
- TLSH T17D148C8AF7623015C55B4639A7AA5F189838EC720393651966C0F16C2C7BCB9872FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-25_a1be63f318b8115ed0f119be15267240_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_a1be63f318b8115ed0f119be15267240_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_a1be63f318b8115ed0f119be15267240_elex_glassworm_wannacry
- Size 200KB
- SHA256 a5497172ea90d43d179afffa5df23e1f969e6ddfde3e14313d17b6b8be0b2201
- MD5 a1be63f318b8115ed0f119be15267240
- SHA1 ccf7b133696b8fbdc2fef4ae1e77d6b1b2720d56
- SHA512 09004e7ea8141c08f06781f9df98c4dfdc39bb07ceebbf7df5cc5ba693ddbdac458a607a82c3f6c58f845d022312ed763abd9d006fd598891b777cb2898e935a
- SSDEEP 6144:8Ly2Kwc64YIPS5F1hLPBp6qorcbIR5KTI:8kwcEz5dhoyvTI
- TLSH T17D148C8AF7623015C55B4639A7AA5F189838EC720393651966C0F16C2C7BCB9872FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1