General
- Target 2026-08-09_a8e1f13d609edc1df64c61bfd337d6db_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260810-bgrctagn51
- SHA256 81fab76b53f53709064690067b0c2bdcf75f47bc8bed50ea63c2eda83af227e2
- MD5 a8e1f13d609edc1df64c61bfd337d6db
- SHA1 9908a9642a7eec89e7d602c517d57ffcc14f9f08
- SHA512 ce9b4dd4b04649cc0a043ec612dc687c1cef4b8af2bc0c7ce916f41ae5bc21911e9be6e905ad36dd9d697709ff4f37ea04cbc7f1bff0b5ef5bc6cbd99d9076e8
- SSDEEP 768:2Bi9dJ7yZ9yHJGEZSKvr8WG7H7gor+ZltliIyYba+E23zNdoTA2o2HM:2B4eyHJrZS//goCPt8M3z/V2/HM
- TLSH T1DD338D43ED5200B7E0270178945B9B6716B76E12041BBFDAAF80DDC5EC718AAECB0297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_a8e1f13d609edc1df64c61bfd337d6db_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a8e1f13d609edc1df64c61bfd337d6db_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a8e1f13d609edc1df64c61bfd337d6db_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 81fab76b53f53709064690067b0c2bdcf75f47bc8bed50ea63c2eda83af227e2
- MD5 a8e1f13d609edc1df64c61bfd337d6db
- SHA1 9908a9642a7eec89e7d602c517d57ffcc14f9f08
- SHA512 ce9b4dd4b04649cc0a043ec612dc687c1cef4b8af2bc0c7ce916f41ae5bc21911e9be6e905ad36dd9d697709ff4f37ea04cbc7f1bff0b5ef5bc6cbd99d9076e8
- SSDEEP 768:2Bi9dJ7yZ9yHJGEZSKvr8WG7H7gor+ZltliIyYba+E23zNdoTA2o2HM:2B4eyHJrZS//goCPt8M3z/V2/HM
- TLSH T1DD338D43ED5200B7E0270178945B9B6716B76E12041BBFDAAF80DDC5EC718AAECB0297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.