General
- Target 2026-08-07_aeb927c77ac5fd51eba141289ba2196a_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260808-a6ejwazsfy
- SHA256 bf94492dfa8764d6b121e18c68e4bb323c30c91680b31c5190ac8ffbca1f32c4
- MD5 aeb927c77ac5fd51eba141289ba2196a
- SHA1 90cc54dc1d1b2c5f018922c2bd2208bcbe030421
- SHA512 a7716bca97f81870512f36a7f7a16595547155b802dc3037dbd7588a592a99337861766487ff74a5247a5c8a4cdb94dba1f2824e9144818dce9871a1cdc02533
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYba+E23zNdoTA2M2HM:2zW4eyHJrfS//goCPZM3z/V2zHM
- TLSH T14F337E43ED5200B7E0270178945B9B6716B76D12051BBFDAAF80DCC5EC728BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_aeb927c77ac5fd51eba141289ba2196a_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_aeb927c77ac5fd51eba141289ba2196a_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_aeb927c77ac5fd51eba141289ba2196a_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 bf94492dfa8764d6b121e18c68e4bb323c30c91680b31c5190ac8ffbca1f32c4
- MD5 aeb927c77ac5fd51eba141289ba2196a
- SHA1 90cc54dc1d1b2c5f018922c2bd2208bcbe030421
- SHA512 a7716bca97f81870512f36a7f7a16595547155b802dc3037dbd7588a592a99337861766487ff74a5247a5c8a4cdb94dba1f2824e9144818dce9871a1cdc02533
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYba+E23zNdoTA2M2HM:2zW4eyHJrfS//goCPZM3z/V2zHM
- TLSH T14F337E43ED5200B7E0270178945B9B6716B76D12051BBFDAAF80DCC5EC728BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory