General
- Target 2026-07-20_7866b175386433193e24f5b4310397df_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- Sample260720-lj9bhsds8j
- SHA256 e7789ab492ef6a9e92bd9f7448519e1aa5666f14127e343e7921b2375b9b522d
- MD5 7866b175386433193e24f5b4310397df
- SHA1 64af23dc29bf7bcf2754fd343ecf0ff4cfd70b11
- SHA512 66619829004ca07135daa8cc1cf8ffd38355a6c046b34efad2840e1895964fb0630d33cd99c79496f0624f8f95f6f33451f3cc42421cb8a3225d2710208d2cf8
- SSDEEP 1536:CtxwjjK7lp27GjV3P1Ynl3oyzrmghCI4KM4jhDUmHG:yqjm0l4yzr9htnjhD5
- TLSH T19763BF87FD9594E2D0261078383EBBF9196718F54E2A5293DF80DC9DAC71B14FA3930A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_7866b175386433193e24f5b4310397df_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_7866b175386433193e24f5b4310397df_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_7866b175386433193e24f5b4310397df_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 66KB
- SHA256 e7789ab492ef6a9e92bd9f7448519e1aa5666f14127e343e7921b2375b9b522d
- MD5 7866b175386433193e24f5b4310397df
- SHA1 64af23dc29bf7bcf2754fd343ecf0ff4cfd70b11
- SHA512 66619829004ca07135daa8cc1cf8ffd38355a6c046b34efad2840e1895964fb0630d33cd99c79496f0624f8f95f6f33451f3cc42421cb8a3225d2710208d2cf8
- SSDEEP 1536:CtxwjjK7lp27GjV3P1Ynl3oyzrmghCI4KM4jhDUmHG:yqjm0l4yzr9htnjhD5
- TLSH T19763BF87FD9594E2D0261078383EBBF9196718F54E2A5293DF80DC9DAC71B14FA3930A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory