General
- Target 2026-11-10_d6be99df84e17cc598092b7be013dbf8_elex_glassworm_wannacry
- Size 88KB
- Sample261111-w94ttsbs3n
- SHA256 025e369080185e41fb710ad7797adcbebe85a8df182322d8cbe56ea584891350
- MD5 d6be99df84e17cc598092b7be013dbf8
- SHA1 5cc7bbb986d550ed2b3a552b6b3444591a346e3f
- SHA512 2d887a4dd23671f9d9d7face50c470bf024efd6721d30b9da160ffbbf6275d36daceb03c29fece096887898c3f9d5df100305b9710ca399b40d37bb2be7b08b7
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vr:eshQvoLqNwDDhCer
- TLSH T1E093399F74E584FDF92462B414AB17B0857BAA84127A67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_d6be99df84e17cc598092b7be013dbf8_elex_glassworm_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_d6be99df84e17cc598092b7be013dbf8_elex_glassworm_wannacry.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
qqpass
C2
-
http://www.zigui.org/article.php?id=103822
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Targets
-
- Target 2026-11-10_d6be99df84e17cc598092b7be013dbf8_elex_glassworm_wannacry
- Size 88KB
- SHA256 025e369080185e41fb710ad7797adcbebe85a8df182322d8cbe56ea584891350
- MD5 d6be99df84e17cc598092b7be013dbf8
- SHA1 5cc7bbb986d550ed2b3a552b6b3444591a346e3f
- SHA512 2d887a4dd23671f9d9d7face50c470bf024efd6721d30b9da160ffbbf6275d36daceb03c29fece096887898c3f9d5df100305b9710ca399b40d37bb2be7b08b7
- SSDEEP 768:JgO5xRYi+SQvvG5bnl/NqNwsKVDsBYD77aXKynF0vr:eshQvoLqNwDDhCer
- TLSH T1E093399F74E584FDF92462B414AB17B0857BAA84127A67CB3F90CD79843B12B573C283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Executes dropped EXE
Modifies system executable filetype association
Drops file in System32 directory