General
- Target 2026-07-23_98dc6b4f4c8d0c1ec6381cc1291b1267_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 2.6MB
- Sample260723-31788adf82
- SHA256 4229b4857c5697f68a687b43a25ca8c7a33a536ae19fed349937e116c13fe147
- MD5 98dc6b4f4c8d0c1ec6381cc1291b1267
- SHA1 9e38bd71dbbf08a89dedd68354a8c6cc32a6473f
- SHA512 9082b69ae6e3ce8cc160f40f13b0f92f5b85bbcd72093e66f1ea450b7322026930c742644a8986fb15ca05b573395d1f33f18e0b0d2183d2cb11f0caef9dfea1
- SSDEEP 49152:Ld6NhDhLEzC74UjhPNTl9Jc+IWuOMn6OnpAWXp2D1hfrrrs8rrrrrrrrrrrrrrre:Ld6XDhyUjdDTIWAn6E2KR
- TLSH T163C52359F306C2B4D79B143B162149AEE72898A92E2EC322E7D5CC484D703E4E5D277F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_98dc6b4f4c8d0c1ec6381cc1291b1267_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_98dc6b4f4c8d0c1ec6381cc1291b1267_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_98dc6b4f4c8d0c1ec6381cc1291b1267_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 2.6MB
- SHA256 4229b4857c5697f68a687b43a25ca8c7a33a536ae19fed349937e116c13fe147
- MD5 98dc6b4f4c8d0c1ec6381cc1291b1267
- SHA1 9e38bd71dbbf08a89dedd68354a8c6cc32a6473f
- SHA512 9082b69ae6e3ce8cc160f40f13b0f92f5b85bbcd72093e66f1ea450b7322026930c742644a8986fb15ca05b573395d1f33f18e0b0d2183d2cb11f0caef9dfea1
- SSDEEP 49152:Ld6NhDhLEzC74UjhPNTl9Jc+IWuOMn6OnpAWXp2D1hfrrrs8rrrrrrrrrrrrrrre:Ld6XDhyUjdDTIWAn6E2KR
- TLSH T163C52359F306C2B4D79B143B162149AEE72898A92E2EC322E7D5CC484D703E4E5D277F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory