General
- Target 2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 65KB
- Sample260710-fpzflsew4t
- SHA256 e755da66ef000ee6b9034ab33c7b29f4e0932aad227c3badc46ae7e217e76e7f
- MD5 e02c2ceede316d995821f716b57594d4
- SHA1 8684ae1ea4ead72d00390d38da9715cd4cb028b7
- SHA512 288d604c0af22adac529efab59f798540d976f521e0a29d7dc7b1623785b216adc5ced1bf2d652b6f3a8b4ef755c0b504c1756f78c7e177938b3c233cd182b56
- SSDEEP 1536:H6BS7LL1gkdo9yHSmNGIiqe8i7o5hMyi32+y4:aBon19WyHSseo5hMydr4
- TLSH T185538D43ADC664F2D15A10B070DEA7B699BF0CFB071E22D7EB81DD812CB4264EA35256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 65KB
- SHA256 e755da66ef000ee6b9034ab33c7b29f4e0932aad227c3badc46ae7e217e76e7f
- MD5 e02c2ceede316d995821f716b57594d4
- SHA1 8684ae1ea4ead72d00390d38da9715cd4cb028b7
- SHA512 288d604c0af22adac529efab59f798540d976f521e0a29d7dc7b1623785b216adc5ced1bf2d652b6f3a8b4ef755c0b504c1756f78c7e177938b3c233cd182b56
- SSDEEP 1536:H6BS7LL1gkdo9yHSmNGIiqe8i7o5hMyi32+y4:aBon19WyHSseo5hMydr4
- TLSH T185538D43ADC664F2D15A10B070DEA7B699BF0CFB071E22D7EB81DD812CB4264EA35256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory