General
- Target 2026-07-22_7c0358a36b223fbe8e0232a4ad4bc9d9_elex_nitol_scribble_strictor_virut_wannacry
- Size 168KB
- Sample260722-3ptlpadf53
- SHA256 b40d39f8b1cca419de6f5ac31e2850c7fe5a765dccfac156ad1351b6f54eb9ec
- MD5 7c0358a36b223fbe8e0232a4ad4bc9d9
- SHA1 2f0ade10d5c0cd7be893baa7ed1eac16dc776ff1
- SHA512 e6c0ac028d5053731011bd4858581ff52b33cdfa60d6603bb09d082aa117881387f7f301022ba56831aac14fea5ed1cc3c41336e9eb1c410352d191045f480a7
- SSDEEP 3072:rHsZmYZAyH19Ce1VHLmqje8TwG+imT0jSyYUhY13gqDblWCImcS:LsvAyH1f1VHHe8MN4WyYi6brPcS
- TLSH T155F3F183DAD010F2E21700B4367B6F7A90B79A6B971E63E7CB51CD8D6C70B24F625218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_7c0358a36b223fbe8e0232a4ad4bc9d9_elex_nitol_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_7c0358a36b223fbe8e0232a4ad4bc9d9_elex_nitol_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_7c0358a36b223fbe8e0232a4ad4bc9d9_elex_nitol_scribble_strictor_virut_wannacry
- Size 168KB
- SHA256 b40d39f8b1cca419de6f5ac31e2850c7fe5a765dccfac156ad1351b6f54eb9ec
- MD5 7c0358a36b223fbe8e0232a4ad4bc9d9
- SHA1 2f0ade10d5c0cd7be893baa7ed1eac16dc776ff1
- SHA512 e6c0ac028d5053731011bd4858581ff52b33cdfa60d6603bb09d082aa117881387f7f301022ba56831aac14fea5ed1cc3c41336e9eb1c410352d191045f480a7
- SSDEEP 3072:rHsZmYZAyH19Ce1VHLmqje8TwG+imT0jSyYUhY13gqDblWCImcS:LsvAyH1f1VHHe8MN4WyYi6brPcS
- TLSH T155F3F183DAD010F2E21700B4367B6F7A90B79A6B971E63E7CB51CD8D6C70B24F625218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory