General
- Target 2026-08-02_b2b9e9e68520151d12b230a6142b61b9_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 38KB
- Sample260802-z7ghassbjb
- SHA256 782ce12aed942ee6d430f52e4d2d706e3a92da067e31d1deae9f8f968285c1f3
- MD5 b2b9e9e68520151d12b230a6142b61b9
- SHA1 9aeaf8da9f4978885d0934e38cf207a35f7f9615
- SHA512 a3ccc898b4db04308545e53726072d09dd23050a1e34b22d21861e1a743062fceedb1501e61f4b4e7ae2016b681ccd67cc65859f9ffcadee6440c658794892b7
- SSDEEP 768:6021Uo1oiRp6enWaj0WCwHa6R1Y2aUddoyzeojY9Po5:E1Uo1JWajVCR6R1YI3oyzfmg5
- TLSH T1CA037C83FD8250F2D0164038383EA7BA6A7B5CB50B2E9153DF40CC9E6875A15FA7A34D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b2b9e9e68520151d12b230a6142b61b9_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b2b9e9e68520151d12b230a6142b61b9_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b2b9e9e68520151d12b230a6142b61b9_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 38KB
- SHA256 782ce12aed942ee6d430f52e4d2d706e3a92da067e31d1deae9f8f968285c1f3
- MD5 b2b9e9e68520151d12b230a6142b61b9
- SHA1 9aeaf8da9f4978885d0934e38cf207a35f7f9615
- SHA512 a3ccc898b4db04308545e53726072d09dd23050a1e34b22d21861e1a743062fceedb1501e61f4b4e7ae2016b681ccd67cc65859f9ffcadee6440c658794892b7
- SSDEEP 768:6021Uo1oiRp6enWaj0WCwHa6R1Y2aUddoyzeojY9Po5:E1Uo1JWajVCR6R1YI3oyzfmg5
- TLSH T1CA037C83FD8250F2D0164038383EA7BA6A7B5CB50B2E9153DF40CC9E6875A15FA7A34D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory