General
- Target 2026-06-02_d7809e14833dfedff096f26aed69c20c_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- Sample260602-t2fe6aby3m
- SHA256 59e2d5dcda5ca325b5f14e2b5171f30f9686abb00108d00f4d3f12e6b52a1ccc
- MD5 d7809e14833dfedff096f26aed69c20c
- SHA1 53139117233458a07833b88cf59af0949fe736d7
- SHA512 ad49ced023e24b65bf8f8a72e632c2fcbdb5a6303f127ea03dfa482409c62db5d5208df7835cf8050c198f563920e76108f6a7a0cbd03df381331c232c1b3d9e
- SSDEEP 1536:rqx6nOp+I5kmJKRWbc5yzvmg6/Sw3Ld5nfW/ZwV7:2xeQ+IMWsyzv96/P7ddWxc
- TLSH T1FE63C083FE8054F2F41B4078786EAB7659B718B18E1FE1A3DF00DC5C68B5614FA7A249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_d7809e14833dfedff096f26aed69c20c_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_d7809e14833dfedff096f26aed69c20c_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_d7809e14833dfedff096f26aed69c20c_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- SHA256 59e2d5dcda5ca325b5f14e2b5171f30f9686abb00108d00f4d3f12e6b52a1ccc
- MD5 d7809e14833dfedff096f26aed69c20c
- SHA1 53139117233458a07833b88cf59af0949fe736d7
- SHA512 ad49ced023e24b65bf8f8a72e632c2fcbdb5a6303f127ea03dfa482409c62db5d5208df7835cf8050c198f563920e76108f6a7a0cbd03df381331c232c1b3d9e
- SSDEEP 1536:rqx6nOp+I5kmJKRWbc5yzvmg6/Sw3Ld5nfW/ZwV7:2xeQ+IMWsyzv96/P7ddWxc
- TLSH T1FE63C083FE8054F2F41B4078786EAB7659B718B18E1FE1A3DF00DC5C68B5614FA7A249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory