General
- Target 2026-06-03_2cc9db35ca5208d9479b74a95bbc8a96_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 62KB
- Sample260603-pths4ae16w
- SHA256 c49f38d73fd17220fe97213692fcb772d9215b08e29561b340141caf307d51fa
- MD5 2cc9db35ca5208d9479b74a95bbc8a96
- SHA1 64812ba9920594f668144462770b48c50e3cddbe
- SHA512 9abaebb7da8215c9caa19ff6d19c47669f4354dacba079190df91706826997112173cea6a7f8c3db8132da3dfeff6070b699f8f76a1537785fc8bf99c221386e
- SSDEEP 1536:CJdMmJyDl+tVZDoWyHjmgcLHHeutI1iJf0:CJuIyDAZfyHj9cb+jIJM
- TLSH T1E553AE83FE8850F1D426507C382EA7B919BB58B58A6EE187DF40DC8D2875624FB3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-03_2cc9db35ca5208d9479b74a95bbc8a96_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_2cc9db35ca5208d9479b74a95bbc8a96_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_2cc9db35ca5208d9479b74a95bbc8a96_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 62KB
- SHA256 c49f38d73fd17220fe97213692fcb772d9215b08e29561b340141caf307d51fa
- MD5 2cc9db35ca5208d9479b74a95bbc8a96
- SHA1 64812ba9920594f668144462770b48c50e3cddbe
- SHA512 9abaebb7da8215c9caa19ff6d19c47669f4354dacba079190df91706826997112173cea6a7f8c3db8132da3dfeff6070b699f8f76a1537785fc8bf99c221386e
- SSDEEP 1536:CJdMmJyDl+tVZDoWyHjmgcLHHeutI1iJf0:CJuIyDAZfyHj9cb+jIJM
- TLSH T1E553AE83FE8850F1D426507C382EA7B919BB58B58A6EE187DF40DC8D2875624FB3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory