General
- Target 2026-07-23_401c5d1052ebe63ed74ba0e7fe447ce4_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- Sample260723-1hfedaxdra
- SHA256 1373c51c6dba7265e16389208568712a00804aee1e4b70b9ca92c139063bdf6d
- MD5 401c5d1052ebe63ed74ba0e7fe447ce4
- SHA1 a4aa4857ef2b3dbc6400e476a0ae33ef3f6117da
- SHA512 b80ec9554d70553bf0dbef10bd6f5cd9bba06a23abc7789d9aeb1906fb5f7d38041c0be8a883a6e3e2d212ebe7c3cbb11f02b8c3df99bc24a5800eaf60d0dcea
- SSDEEP 1536:SrayLgKh8/HIYNcn0HUprPyzVmgRyhB++mlAD516HIVn:KkKh8/HIYNc0wTyzV9GB++wUv6HI
- TLSH T10663C043FE9640F2E42A507C387B6B76A6A728710A2E5087DF40DC9D58B0A55FE7B309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_401c5d1052ebe63ed74ba0e7fe447ce4_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_401c5d1052ebe63ed74ba0e7fe447ce4_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_401c5d1052ebe63ed74ba0e7fe447ce4_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 65KB
- SHA256 1373c51c6dba7265e16389208568712a00804aee1e4b70b9ca92c139063bdf6d
- MD5 401c5d1052ebe63ed74ba0e7fe447ce4
- SHA1 a4aa4857ef2b3dbc6400e476a0ae33ef3f6117da
- SHA512 b80ec9554d70553bf0dbef10bd6f5cd9bba06a23abc7789d9aeb1906fb5f7d38041c0be8a883a6e3e2d212ebe7c3cbb11f02b8c3df99bc24a5800eaf60d0dcea
- SSDEEP 1536:SrayLgKh8/HIYNcn0HUprPyzVmgRyhB++mlAD516HIVn:KkKh8/HIYNc0wTyzV9GB++wUv6HI
- TLSH T10663C043FE9640F2E42A507C387B6B76A6A728710A2E5087DF40DC9D58B0A55FE7B309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Drops file in System32 directory