General
- Target 2026-05-31_e81456eec0d1a0892e81606a4f9631d3_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- Sample260531-vbml8acz7z
- SHA256 5f824402ffc60c86ff4b3dbc76192da690a1fbeb473fe3a9b00a1a98bf002524
- MD5 e81456eec0d1a0892e81606a4f9631d3
- SHA1 50996b883ddc6312a411dce773645ae2cad1822d
- SHA512 853ba5f84f0b805d1934fc59ddb2170a9bb78ff09929f0616882fb27a7c18e814a27bcea731ec4a23ac625919f1b368a4fc36f9bf8430de7eb42f0418f3bd5a1
- SSDEEP 1536:erayLgKh8/HIYNcn0HUsaPyzVmghB6MjxGbs6hX+R6I:+kKh8/HIYNc0t8yzV9hsMjxGbs6hxI
- TLSH T16B53BE83FDC654F2D41A40B8342FB7B5AA2B5C314A1EA297DF40DC9D5872A15FA3B24C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-31_e81456eec0d1a0892e81606a4f9631d3_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_e81456eec0d1a0892e81606a4f9631d3_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_e81456eec0d1a0892e81606a4f9631d3_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- SHA256 5f824402ffc60c86ff4b3dbc76192da690a1fbeb473fe3a9b00a1a98bf002524
- MD5 e81456eec0d1a0892e81606a4f9631d3
- SHA1 50996b883ddc6312a411dce773645ae2cad1822d
- SHA512 853ba5f84f0b805d1934fc59ddb2170a9bb78ff09929f0616882fb27a7c18e814a27bcea731ec4a23ac625919f1b368a4fc36f9bf8430de7eb42f0418f3bd5a1
- SSDEEP 1536:erayLgKh8/HIYNcn0HUsaPyzVmghB6MjxGbs6hX+R6I:+kKh8/HIYNc0t8yzV9hsMjxGbs6hxI
- TLSH T16B53BE83FDC654F2D41A40B8342FB7B5AA2B5C314A1EA297DF40DC9D5872A15FA3B24C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Drops file in Drivers directory