General
- Target 2026-06-03_8ee262eed6ce9efe6be10ebd9fc41aa9_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 65KB
- Sample260603-eamylag19y
- SHA256 df075186680e726046ff277a616984f2225f4087a2c3f2996116e5a9d4c4a63e
- MD5 8ee262eed6ce9efe6be10ebd9fc41aa9
- SHA1 147328815be8e3fa835927a5ea9aa7a5824b1a8b
- SHA512 e6c49cbda3beb65706db5bd6c03704cf0e5c75047646a57627cfb29d6dd935b45b7fa5f42b5d0e8c4414b8b462094658a9c6b74bea40075aa18d49746e45e3b5
- SSDEEP 768:I68uUCS77GhGLhLp6s1R6o9yHHojY9PkqV/Q8TBc6Wl8Rw2zlXOc/iCjXEmIoy/:I6BS7LL1Mdo9yHSmpxTBceRw2z1Ormu
- TLSH T12F53AF13DECA68F2C04604B035DFA7B6A9FF08FA160A21D7EBC0CDD62CB4654EA36555
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-03_8ee262eed6ce9efe6be10ebd9fc41aa9_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_8ee262eed6ce9efe6be10ebd9fc41aa9_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_8ee262eed6ce9efe6be10ebd9fc41aa9_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 65KB
- SHA256 df075186680e726046ff277a616984f2225f4087a2c3f2996116e5a9d4c4a63e
- MD5 8ee262eed6ce9efe6be10ebd9fc41aa9
- SHA1 147328815be8e3fa835927a5ea9aa7a5824b1a8b
- SHA512 e6c49cbda3beb65706db5bd6c03704cf0e5c75047646a57627cfb29d6dd935b45b7fa5f42b5d0e8c4414b8b462094658a9c6b74bea40075aa18d49746e45e3b5
- SSDEEP 768:I68uUCS77GhGLhLp6s1R6o9yHHojY9PkqV/Q8TBc6Wl8Rw2zlXOc/iCjXEmIoy/:I6BS7LL1Mdo9yHSmpxTBceRw2z1Ormu
- TLSH T12F53AF13DECA68F2C04604B035DFA7B6A9FF08FA160A21D7EBC0CDD62CB4654EA36555
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies firewall policy service
- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Executes dropped EXE
Drops file in System32 directory