2026-02-24_7e315c5d15dee82b1948b067467eedb1_elex_glassworm_wannacry
Classification: Malicious
2026-02-24_7e315c5d15dee82b1948b067467eedb1_elex_glassworm_wannacry is a malicious file sample. Reported by 1 threat source, last seen 2026-02-24.
Detection summary
- 67 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Qqpass |
Triage |
2026-02-24 23:13:34 |
2026-02-24 23:13:34 |
malicious-activity
|
|
Tags
qqpass
discovery
persistence
trojan
Sample information
- Filenames
- 2026-02-24_7e315c5d15dee82b1948b067467eedb1_elex_glassworm_wannacry
- MD5
7e315c5d15dee82b1948b067467eedb1
- SHA-1
b56c467f70126d9bd96fa44fe9e3c28014d2b80f
- SHA-256
65a5f69ef457b7decf1e3ed12247ae9c5f3d54e86a85ff1f652d6c82886d5af4
- SHA-512
e727a9bac45b7ee87eb5004f04e2722554170cdb50677ccbe06d0e9b37fdcfe931bf0a3750d0aa741c272d90aaa87d8cc0eece660558e71619dd48696fe2004c
- First indexed
- 2026-02-24 23:13:34
- Last updated
- 2026-09-03 00:21:12
Antivirus detections
| Engine | Detection |
| ALYac | Trojan.GenericKD.79423737 |
| APEX | Malicious |
| AVG | Win32:Agent-AVFW [Trj] |
| Acronis | suspicious |
| AhnLab-V3 | HEUR/UnSec.X1469 |
| Alibaba | TrojanPSW:Win32/Generic.cfd93223 |
| Antiy-AVL | Trojan[Backdoor]/Win32.PowerSpider |
| Arcabit | Trojan.Generic.D4BBE8F9 |
| Avast | Win32:Agent-AVFW [Trj] |
| Avira | TR/Dropper.Gen |
| Baidu | Win32.Trojan.Agent.abh |
| BitDefender | Trojan.GenericKD.79423737 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Agent.20330 |
| CTX | exe.trojan.goft |
| ClamAV | Win.Malware.Ulise-9951569-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PWS.Goft |
| ESET-NOD32 | Win32/PowerSpider trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.79423737 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/Agent.BO!tr |
| GData | Win32.Trojan.MyRunner.A |
| Google | Detected |
| Gridinsoft | Trojan.Heur!.03006021 |
| Ikarus | Trojan.Win32.Agent |
| Jiangmin | Trojan/QQMsg.Zigui.a |
| K7AntiVirus | Trojan ( 005a7db41 ) |
| K7GW | Trojan ( 005a7db41 ) |
| Kaspersky | HEUR:Trojan-PSW.Win32.Goft.gen |
| Kingsoft | Win32.Trojan-PSW.Goft.pef |
| Lionic | Trojan.Win32.Agent.le4g |
| Malwarebytes | Generic.Trojan.Malicious.DDS |
| MaxSecure | Trojan.Malware.325358031.susgen |
| McAfeeD | Trojan:Win/Goft.AA |
| MicroWorld-eScan | Trojan.GenericKD.79423737 |
| Microsoft | Trojan:Win32/Dacic!rfn |
| NANO-Antivirus | Trojan.Win32.Agent.cjelf |
| Paloalto | generic.ml |
| Panda | Trj/Agent.IT |
| Rising | Stealer.OnlineGames!1.6995 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Dropper |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.PWSGoft.tz |
| Sophos | Troj/Agent-ZR |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.Win32.Powerspider.ca |
| Trapmine | malicious.high.ml.score |
| TrellixENS | PWS-Goft |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VBA32 | BScope.Trojan.Agent |
| VIPRE | Trojan.GenericKD.79423737 |
| Varist | W32/S-54489cd6!Eldorado |
| ViRobot | Trojan.Win.Z.Agent.1682563 |
| VirIT | Trojan.Win32.GenusT.DYBT |
| Webroot | W32.Malware.gen |
| Xcitium | TrojWare.Win32.PSW.Goft._0@198apc |
| Yandex | Trojan.GenAsa!nkKEE8eto3g |
| Zillya | Trojan.PowerSpider.Win32.2827 |
| ZoneAlarm | Troj/Agent-ZR |
| alibabacloud | Ransomware:Win/PowerSpider.0c9eddc1 |
| huorong | Worm/Qunsender.d |