2026-08-21_ba23c4ff6f347bd8dfa53d8c50d66cc3_destroyer_elex_glassworm_wannacry
Classification: Malicious
2026-08-21_ba23c4ff6f347bd8dfa53d8c50d66cc3_destroyer_elex_glassworm_wannacry is a ransomware. Detected by 54 antivirus engines. Linked to Chaos malware.
Detection summary
- 54 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CHAOS (S0220)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Chaos | Triage | 2026-08-21 07:19:25 | 2026-08-21 07:19:25 | malicious-activity | S0220 Chaos |
Tags
chaos defense_evasion evasion execution impact persistence privilege_escalation ransomware spyware stealerSample information
- Filenames
- 2026-08-21_ba23c4ff6f347bd8dfa53d8c50d66cc3_destroyer_elex_glassworm_wannacry
- SHA-256
c93a4691d385cef569207e74b59a2e7e6002a95f51ec44305a85a2cbfa0faa17- First indexed
- 2026-08-21 07:19:25
- Last updated
- 2026-10-15 01:59:28
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Filecoder |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.FTD.C4580181 |
| Alibaba | Ransom:MSIL/FileCoder.3781d5bf |
| Antiy-AVL | Trojan[Ransom]/MSIL.Filecoder |
| Arcabit | Generic.Ransom.Small.A26C8671 |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Generic.Ransom.Small.A26C8671 |
| Bkav | W32.Malware.A8C64EB6 |
| CAT-QuickHeal | Trojan.MsilFC.S23210140 |
| CTX | exe.ransomware.small |
| ClamAV | Win.Ransomware.Hydracrypt-9878672-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.34437 |
| ESET-NOD32 | MSIL/Filecoder.Chaos.A trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Generic.Ransom.Small.A26C8671 (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | MSIL/Filecoder.AGP!tr.ransom |
| GData | MSIL.Trojan-Ransom.Remind.B |
| Detected | |
| Gridinsoft | Ransom.Win32.Banker.oa!s1 |
| K7AntiVirus | Ransomware ( 005a8b921 ) |
| K7GW | Ransomware ( 005a8b921 ) |
| Kaspersky | HEUR:Trojan-Ransom.MSIL.Agent.gen |
| Kingsoft | MSIL.Trojan-Ransom.Agent.gen |
| Lionic | Trojan.MSIL.Agent.j!c |
| Malwarebytes | Ransom.Chaos |
| McAfeeD | Real Protect-LS!BA23C4FF6F34 |
| MicroWorld-eScan | Generic.Ransom.Small.A26C8671 |
| Microsoft | Ransom:MSIL/FileCoder.AD!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Destructor!1.B060 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Ransomware-FTD!BA23C4FF6F34 |
| Sophos | Troj/Ransom-GWT |
| Symantec | Ransom.Sorry |
| Tencent | Trojan-Ransom.Msil.Agent.ga |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Ransomware-FTD!BA23C4FF6F34 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA5 |
| VBA32 | Trojan.MSIL.DelShad.Heur |
| VIPRE | Generic.Ransom.Small.A26C8671 |
| Varist | W32/Azorult.D.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| ZoneAlarm | Troj/Ransom-GWT |
| alibabacloud | Trojan:MSIL/ClipBanker.MO |
| huorong | Ransom/BTCware.d |