General
- Target 2026-08-01_e68da7805df9283878d31dab2c06b240_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 66KB
- Sample260801-xpkqwsfd49
- SHA256 6516f792604c06b34daa8f13254a37d416545bad812a6ffb6142add14f10489f
- MD5 e68da7805df9283878d31dab2c06b240
- SHA1 c8a6ba43c2d3c486d0bad14cde0f59f65e591f06
- SHA512 d91f521198e519ec350a911df2e539d028c5c259aaa51691988f36980fb7a57df1fc8a304d01a40d3138f3c5c5d90adea3612be02ca720225cd3533feebd2f92
- SSDEEP 1536:HtxwjjK7lp27GjV3P1Yil3oyzjT/KOpuZi2A1bb6bH6:NqjmJl4yzjT/RZxZWbH6
- TLSH T1F1637D47FFA5A4F2D0110478387E9BB96EA7DC74471A67C7AF40CEA95C70A10ED292C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_e68da7805df9283878d31dab2c06b240_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e68da7805df9283878d31dab2c06b240_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e68da7805df9283878d31dab2c06b240_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 66KB
- SHA256 6516f792604c06b34daa8f13254a37d416545bad812a6ffb6142add14f10489f
- MD5 e68da7805df9283878d31dab2c06b240
- SHA1 c8a6ba43c2d3c486d0bad14cde0f59f65e591f06
- SHA512 d91f521198e519ec350a911df2e539d028c5c259aaa51691988f36980fb7a57df1fc8a304d01a40d3138f3c5c5d90adea3612be02ca720225cd3533feebd2f92
- SSDEEP 1536:HtxwjjK7lp27GjV3P1Yil3oyzjT/KOpuZi2A1bb6bH6:NqjmJl4yzjT/RZxZWbH6
- TLSH T1F1637D47FFA5A4F2D0110478387E9BB96EA7DC74471A67C7AF40CEA95C70A10ED292C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents