General
- Target 2026-07-10_b05e1a7735e1d6c16bfdfac10acd48d9_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 152KB
- Sample260710-e1nb2ses9w
- SHA256 882548fc2e87423e4872e1607f5a7b0b894e578994e7282cc7ae9dc2e6079e9b
- MD5 b05e1a7735e1d6c16bfdfac10acd48d9
- SHA1 f97ae8f0ec56515f3b1217c50fde8b8e029d2751
- SHA512 850b6b3dd52a49bd7386f51053f05742c9476a095cd002e5a16ff53a6766f2753b5e46b19e49aadb7c0eefabe410ed19afa5e2771edd181605c3982c432acc62
- SSDEEP 3072:fJuIyDpZFyHST6+8KnbI4hDIb8KKnbs4hDIzOx1Wzm:UI4bFyHSW+r84hDU8ZQ4hDSOxs
- TLSH T1B3E3AE477BA5E8F2C41024B4297D8B752EA7E978174A6BCB6B90DFFC1CB0981CD181C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_b05e1a7735e1d6c16bfdfac10acd48d9_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_b05e1a7735e1d6c16bfdfac10acd48d9_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_b05e1a7735e1d6c16bfdfac10acd48d9_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 152KB
- SHA256 882548fc2e87423e4872e1607f5a7b0b894e578994e7282cc7ae9dc2e6079e9b
- MD5 b05e1a7735e1d6c16bfdfac10acd48d9
- SHA1 f97ae8f0ec56515f3b1217c50fde8b8e029d2751
- SHA512 850b6b3dd52a49bd7386f51053f05742c9476a095cd002e5a16ff53a6766f2753b5e46b19e49aadb7c0eefabe410ed19afa5e2771edd181605c3982c432acc62
- SSDEEP 3072:fJuIyDpZFyHST6+8KnbI4hDIb8KKnbs4hDIzOx1Wzm:UI4bFyHSW+r84hDU8ZQ4hDSOxs
- TLSH T1B3E3AE477BA5E8F2C41024B4297D8B752EA7E978174A6BCB6B90DFFC1CB0981CD181C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents