General
- Target 2026-07-20_42435890914374ea9b979ec84cf576b0_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 93KB
- Sample260720-jpblbsaw7l
- SHA256 e0076253e0c4b76d264615bdb18022e1e18e11b1e9b61bc927c5b308c9a9ef62
- MD5 42435890914374ea9b979ec84cf576b0
- SHA1 527d3b4a742b2bd6af82c2e55a82f027fa864647
- SHA512 271a4c86e894c1fc16abc9958b6c8b29086d48667b166fcac7867fa4f8837769aa72d12c1f1ec8b799af796ef62689eac72ba04abe9b91e31c671b4a3caec822
- SSDEEP 1536:GrayLgKh8/HIYNcn0HUOrPyzVmgTenWJexs7+cgVIDW9fezsVuLz5J1:2kKh8/HIYNc0TTyzV9SWP9gVIO1Vun5
- TLSH T19D93E183EBC610F1E41700B8397BAB79A6671C704A1EB193DF40DD9D6CB6911EE3221D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_42435890914374ea9b979ec84cf576b0_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_42435890914374ea9b979ec84cf576b0_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_42435890914374ea9b979ec84cf576b0_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 93KB
- SHA256 e0076253e0c4b76d264615bdb18022e1e18e11b1e9b61bc927c5b308c9a9ef62
- MD5 42435890914374ea9b979ec84cf576b0
- SHA1 527d3b4a742b2bd6af82c2e55a82f027fa864647
- SHA512 271a4c86e894c1fc16abc9958b6c8b29086d48667b166fcac7867fa4f8837769aa72d12c1f1ec8b799af796ef62689eac72ba04abe9b91e31c671b4a3caec822
- SSDEEP 1536:GrayLgKh8/HIYNcn0HUOrPyzVmgTenWJexs7+cgVIDW9fezsVuLz5J1:2kKh8/HIYNc0TTyzV9SWP9gVIO1Vun5
- TLSH T19D93E183EBC610F1E41700B8397BAB79A6671C704A1EB193DF40DD9D6CB6911EE3221D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Drops file in System32 directory