General
- Target 2026-08-10_9040b69c2fdd327f63307217bf0d060e_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260810-gtywbaed92
- SHA256 a32e5211ce8dd865e120344c913c3d766b56c4829972a29ef70fcb7621123d43
- MD5 9040b69c2fdd327f63307217bf0d060e
- SHA1 db46e5198a8e6f26eeceb4f54d83944ca069b6b7
- SHA512 2c363b877171c04261926405489bbd006d52a218714b7e10d445e0717e9658b47506f6cfba599be6f7d446af1edb212b46435a0c403c7ddb6aac434c3c68d1c6
- SSDEEP 768:2Pi9dJ7yZ9yHJGE0SKvr8WG7H7gor+Zl8YiIyYba+E23zNdoTA2o2HM:2P4eyHJr0S//goCP8TM3z/V2/HM
- TLSH T1A9337D43ED5200B7E0270178941B9B6716B76E52041FBFDAAF809DC5EC728AEECB0257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9040b69c2fdd327f63307217bf0d060e_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_9040b69c2fdd327f63307217bf0d060e_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9040b69c2fdd327f63307217bf0d060e_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 a32e5211ce8dd865e120344c913c3d766b56c4829972a29ef70fcb7621123d43
- MD5 9040b69c2fdd327f63307217bf0d060e
- SHA1 db46e5198a8e6f26eeceb4f54d83944ca069b6b7
- SHA512 2c363b877171c04261926405489bbd006d52a218714b7e10d445e0717e9658b47506f6cfba599be6f7d446af1edb212b46435a0c403c7ddb6aac434c3c68d1c6
- SSDEEP 768:2Pi9dJ7yZ9yHJGE0SKvr8WG7H7gor+Zl8YiIyYba+E23zNdoTA2o2HM:2P4eyHJr0S//goCP8TM3z/V2/HM
- TLSH T1A9337D43ED5200B7E0270178941B9B6716B76E52041FBFDAAF809DC5EC728AEECB0257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.