General
- Target 2026-07-19_910ca865e150ba0443ee6607bd263d3d_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- Sample260720-bccnvsdt4z
- SHA256 f93c5cf686ae769fd81ae395f939eaa31f2fbbc4550b3fa19656f55b78370a26
- MD5 910ca865e150ba0443ee6607bd263d3d
- SHA1 081fc161c31ad0ac8ab758e1eaa51b985f095ed4
- SHA512 c678165a45cfcd09ed0428ca83c897b2dea08ef038c414b7ac348fcefa4b79dac31bc720a45489ddffb6967f90816358eebb6e4e70298f682cea0541d5369e64
- SSDEEP 1536:lt9ZXR9c6JBZzosyz+mgdhjuHCE4epH2WCEU:ltvB9c2ZFyz+9LuH81EU
- TLSH T1DD63BF43F99540F1E113443C7469ABBA697B18B28B1EE193EF00DCAC5875318FE7A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-19_910ca865e150ba0443ee6607bd263d3d_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_910ca865e150ba0443ee6607bd263d3d_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_910ca865e150ba0443ee6607bd263d3d_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- SHA256 f93c5cf686ae769fd81ae395f939eaa31f2fbbc4550b3fa19656f55b78370a26
- MD5 910ca865e150ba0443ee6607bd263d3d
- SHA1 081fc161c31ad0ac8ab758e1eaa51b985f095ed4
- SHA512 c678165a45cfcd09ed0428ca83c897b2dea08ef038c414b7ac348fcefa4b79dac31bc720a45489ddffb6967f90816358eebb6e4e70298f682cea0541d5369e64
- SSDEEP 1536:lt9ZXR9c6JBZzosyz+mgdhjuHCE4epH2WCEU:ltvB9c2ZFyz+9LuH81EU
- TLSH T1DD63BF43F99540F1E113443C7469ABBA697B18B28B1EE193EF00DCAC5875318FE7A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory