General
- Target 2026-06-29_b1cb17bed83b7a1b3fba33d6dc6e1a6c_elex_gh0st-rat_wannacry
- Size 50KB
- Sample260630-fd62baft2m
- SHA256 218767941b1596e2669b3afce3bff398d0573ea75acb11b78b5fd0ec4900dc9f
- MD5 b1cb17bed83b7a1b3fba33d6dc6e1a6c
- SHA1 0430b94e56807010f8a897295d2086a819636092
- SHA512 905d813e95e1d0b4309a7724208034c3118aabf96a84eaacb879b9d3bbebbf3c88047c7064e24bcd35305ca133a8c75395e58116f8f58713025de6ed715f2baa
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2o2HT:2zW4eyHJrfS//goCPZT3z/V2/HT
- TLSH T1D8337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b1cb17bed83b7a1b3fba33d6dc6e1a6c_elex_gh0st-rat_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b1cb17bed83b7a1b3fba33d6dc6e1a6c_elex_gh0st-rat_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b1cb17bed83b7a1b3fba33d6dc6e1a6c_elex_gh0st-rat_wannacry
- Size 50KB
- SHA256 218767941b1596e2669b3afce3bff398d0573ea75acb11b78b5fd0ec4900dc9f
- MD5 b1cb17bed83b7a1b3fba33d6dc6e1a6c
- SHA1 0430b94e56807010f8a897295d2086a819636092
- SHA512 905d813e95e1d0b4309a7724208034c3118aabf96a84eaacb879b9d3bbebbf3c88047c7064e24bcd35305ca133a8c75395e58116f8f58713025de6ed715f2baa
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2o2HT:2zW4eyHJrfS//goCPZT3z/V2/HT
- TLSH T1D8337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory