General
- Target 2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 62KB
- Sample260715-l2evmahs4m
- SHA256 c2e0b98dfe1d9636e72f4999f76f9c859a496a6d25d6c3bca9249d078703e81c
- MD5 615864e283d9807a580651f6b567a158
- SHA1 a989c03fb8841d9f9ed0db01e42ac20922053abf
- SHA512 5bc4bc883b8ad0a6db0748130ad772f84ade1280fad68622368347e743eb6881da41490088201090138a3ace8fb319ad23e9bb0e0b47cfa8aece47432d387388
- SSDEEP 1536:+0q7WuHEqUExlayH2mqW3iiPZ5tY6P/8XU8:veHE+uyH2YyILt8X
- TLSH T1A353CF57EA8540F3F413017C251E9BF6A5BF8C36462EB297EF80CC811CB5629F87A199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry
- Size 62KB
- SHA256 c2e0b98dfe1d9636e72f4999f76f9c859a496a6d25d6c3bca9249d078703e81c
- MD5 615864e283d9807a580651f6b567a158
- SHA1 a989c03fb8841d9f9ed0db01e42ac20922053abf
- SHA512 5bc4bc883b8ad0a6db0748130ad772f84ade1280fad68622368347e743eb6881da41490088201090138a3ace8fb319ad23e9bb0e0b47cfa8aece47432d387388
- SSDEEP 1536:+0q7WuHEqUExlayH2mqW3iiPZ5tY6P/8XU8:veHE+uyH2YyILt8X
- TLSH T1A353CF57EA8540F3F413017C251E9BF6A5BF8C36462EB297EF80CC811CB5629F87A199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory