General
- Target 2026-08-02_644b4f7f29c74cc28ae22f405be3c7ce_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260802-rphnmsvcqf
- SHA256 c0a6d35dc95a76bea47a1e4549500bdd8bd124a66fc767e2d92d3de0e29e318f
- MD5 644b4f7f29c74cc28ae22f405be3c7ce
- SHA1 e73a552bd87f4751a94e8dbc92c54ff5941e005d
- SHA512 f87174dffa04ee83f67b4a142b50a84b78513f0ca082423bc5831128be7ca6037cef305f4ccbac8ddbd2ee5588d5fc1556da0b49cee05827af2fe2ce55cf8c2c
- SSDEEP 768:21Ei9dJ7yZ9yHJGE0e/uSKvr8WG7H7gor+ZlNCiIyYbd+E23zNdoTA2C2HT:2m4eyHJr0e/uS//goCPNRT3z/V2NHT
- TLSH T100337D43ED5200F7E0270178945B9B7716B76E53041BBF9AAB80DDC5EC718AAECB0297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_644b4f7f29c74cc28ae22f405be3c7ce_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_644b4f7f29c74cc28ae22f405be3c7ce_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_644b4f7f29c74cc28ae22f405be3c7ce_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 c0a6d35dc95a76bea47a1e4549500bdd8bd124a66fc767e2d92d3de0e29e318f
- MD5 644b4f7f29c74cc28ae22f405be3c7ce
- SHA1 e73a552bd87f4751a94e8dbc92c54ff5941e005d
- SHA512 f87174dffa04ee83f67b4a142b50a84b78513f0ca082423bc5831128be7ca6037cef305f4ccbac8ddbd2ee5588d5fc1556da0b49cee05827af2fe2ce55cf8c2c
- SSDEEP 768:21Ei9dJ7yZ9yHJGE0e/uSKvr8WG7H7gor+ZlNCiIyYbd+E23zNdoTA2C2HT:2m4eyHJr0e/uS//goCPNRT3z/V2NHT
- TLSH T100337D43ED5200F7E0270178945B9B7716B76E53041BBF9AAB80DDC5EC718AAECB0297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.