General
- Target 2026-07-15_15065ad5a13e210a9f439d34adc21ad2_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- Sample260715-mlafmsdv7v
- SHA256 38f2c5f4dad132fbe5d606f55b42fcecde893e5dcff039ab51ccac2e2ead29a9
- MD5 15065ad5a13e210a9f439d34adc21ad2
- SHA1 6d0d8dd9ab5a0724dc36a4bf97942bf2c5f8e420
- SHA512 ca785dfe45a28c1f4e277ccb63c28d91f39f23f396a62b7aab6f3479b050b17c2d82ccb62f4a9645947feca766c1adc3999d85bc2c46d976c3226912c1bb14d1
- SSDEEP 1536:btxwjjK7lp27GjV3P1YIl3oyzrmgK5T6JiWNlcVCprMawbDSUP:Zqjm7l4yzr9Ksv6VurMawb5
- TLSH T10B63BF43E98054F2E11A543C383AABBA6A674CB64B2F9293DF40DC9E2C71715F63934D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_15065ad5a13e210a9f439d34adc21ad2_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_15065ad5a13e210a9f439d34adc21ad2_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_15065ad5a13e210a9f439d34adc21ad2_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- SHA256 38f2c5f4dad132fbe5d606f55b42fcecde893e5dcff039ab51ccac2e2ead29a9
- MD5 15065ad5a13e210a9f439d34adc21ad2
- SHA1 6d0d8dd9ab5a0724dc36a4bf97942bf2c5f8e420
- SHA512 ca785dfe45a28c1f4e277ccb63c28d91f39f23f396a62b7aab6f3479b050b17c2d82ccb62f4a9645947feca766c1adc3999d85bc2c46d976c3226912c1bb14d1
- SSDEEP 1536:btxwjjK7lp27GjV3P1YIl3oyzrmgK5T6JiWNlcVCprMawbDSUP:Zqjm7l4yzr9Ksv6VurMawb5
- TLSH T10B63BF43E98054F2E11A543C383AABBA6A674CB64B2F9293DF40DC9E2C71715F63934D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory