General
- Target 2026-04-15_37deb2714071c4c4ee6792de1790f89e_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- Sample260415-rd8exsa17v
- SHA256 992af5e976db23e8066ead2bcd24a3409c10a287e144c162add6d5f6c3c7f332
- MD5 37deb2714071c4c4ee6792de1790f89e
- SHA1 8f48e98eaaf099707d5e9f62658e2cbe78a490b4
- SHA512 0873a514e08961f058d2fe23f7e31d29c7034042148f4fcbb8bed62e64b227cbb2ef9b4f3b5cc1799b54f38d5f770cd081b2c993527e73ff288538326d6e768b
- SSDEEP 1536:crayLgKh8/HIYNcn0HUpaPyzVmg8nnsTyDOuD+DQqQRpyl:EkKh8/HIYNc0w8yzV9SnsTBZDQbRpyl
- TLSH T1A863BF87FAD640F1E0164078347EA7B655A72C714B2EA287EF00DD8E28F5B14FA7624D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_37deb2714071c4c4ee6792de1790f89e_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_37deb2714071c4c4ee6792de1790f89e_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_37deb2714071c4c4ee6792de1790f89e_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- SHA256 992af5e976db23e8066ead2bcd24a3409c10a287e144c162add6d5f6c3c7f332
- MD5 37deb2714071c4c4ee6792de1790f89e
- SHA1 8f48e98eaaf099707d5e9f62658e2cbe78a490b4
- SHA512 0873a514e08961f058d2fe23f7e31d29c7034042148f4fcbb8bed62e64b227cbb2ef9b4f3b5cc1799b54f38d5f770cd081b2c993527e73ff288538326d6e768b
- SSDEEP 1536:crayLgKh8/HIYNcn0HUpaPyzVmg8nnsTyDOuD+DQqQRpyl:EkKh8/HIYNc0w8yzV9SnsTBZDQbRpyl
- TLSH T1A863BF87FAD640F1E0164078347EA7B655A72C714B2EA287EF00DD8E28F5B14FA7624D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents