General
- Target 2026-07-02_2cbc3d5a2a820a43b1e19477170a7346_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- Sample260702-hbf38ads6v
- SHA256 ad4fa97e59ccf67b56503e68c18dd181ee3ce31fa4c9ce00f3158e7e58ddc3cf
- MD5 2cbc3d5a2a820a43b1e19477170a7346
- SHA1 62eb43774fbab35b33bf318d64c6b430f1fc10a5
- SHA512 3d92b72e62186541d8497407e13070a25fbc7133d0422fdaad8545755403a174a9bd70f9c72c7ba10f3c7b23de3e54abbe191618aaba919f21099e520aaaa0f0
- SSDEEP 1536:Coxr+ip+izkmJK3eYlrcDyz9mgQmv4vlzVi8C4:DxKU+iyFlGyz99Qmwvb
- TLSH T19963AF87EA5004F2F446217878FA9B7B2E6B9C788A1DF2C2DF41CC4D6874B04E97D189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_2cbc3d5a2a820a43b1e19477170a7346_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_2cbc3d5a2a820a43b1e19477170a7346_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_2cbc3d5a2a820a43b1e19477170a7346_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- SHA256 ad4fa97e59ccf67b56503e68c18dd181ee3ce31fa4c9ce00f3158e7e58ddc3cf
- MD5 2cbc3d5a2a820a43b1e19477170a7346
- SHA1 62eb43774fbab35b33bf318d64c6b430f1fc10a5
- SHA512 3d92b72e62186541d8497407e13070a25fbc7133d0422fdaad8545755403a174a9bd70f9c72c7ba10f3c7b23de3e54abbe191618aaba919f21099e520aaaa0f0
- SSDEEP 1536:Coxr+ip+izkmJK3eYlrcDyz9mgQmv4vlzVi8C4:DxKU+iyFlGyz99Qmwvb
- TLSH T19963AF87EA5004F2F446217878FA9B7B2E6B9C788A1DF2C2DF41CC4D6874B04E97D189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory