General
- Target 2026-08-09_4e4e0f4d3d990afab72ff9ba040e3aba_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260809-25exssxbkg
- SHA256 e5a23a1a0e0cdd2ef9a820479fd28d32d55c59b9657dfdee7bd54b1ee27645fb
- MD5 4e4e0f4d3d990afab72ff9ba040e3aba
- SHA1 6ec3e901ab387497adadbb134d39d9629297f3ff
- SHA512 15731a64180c2375891577fa0f365113c87ac0777ba69f84905465fbe03e02d364ee761ddedb6af80e7e4f1eb68981ab4789df69b04f46e401dd23f67db04dec
- SSDEEP 768:26i9dJ7yZ9yHJGEtcdSKvr8WG7H7gor+Zl24iIyYbd+E23zNdoTA2H2HT:264eyHJrtcdS//goCP2zT3z/V2WHT
- TLSH T1B1337D43ED5240F7E0270178941B9B6716B76D13041BBF9AAF80DD85EC718ABECB02A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4e4e0f4d3d990afab72ff9ba040e3aba_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4e4e0f4d3d990afab72ff9ba040e3aba_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4e4e0f4d3d990afab72ff9ba040e3aba_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 e5a23a1a0e0cdd2ef9a820479fd28d32d55c59b9657dfdee7bd54b1ee27645fb
- MD5 4e4e0f4d3d990afab72ff9ba040e3aba
- SHA1 6ec3e901ab387497adadbb134d39d9629297f3ff
- SHA512 15731a64180c2375891577fa0f365113c87ac0777ba69f84905465fbe03e02d364ee761ddedb6af80e7e4f1eb68981ab4789df69b04f46e401dd23f67db04dec
- SSDEEP 768:26i9dJ7yZ9yHJGEtcdSKvr8WG7H7gor+Zl24iIyYbd+E23zNdoTA2H2HT:264eyHJrtcdS//goCP2zT3z/V2WHT
- TLSH T1B1337D43ED5240F7E0270178941B9B6716B76D13041BBF9AAF80DD85EC718ABECB02A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.