General
- Target 2026-08-14_d27803cb9c13f321206f40cc303ac4b8_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 123KB
- Sample260814-pma5nshe45
- SHA256 6541710e74a3654833d7476b824c6893f8e23121621e3a163037450fe883cf78
- MD5 d27803cb9c13f321206f40cc303ac4b8
- SHA1 c42925172ba09309139c9eef50eafa64df601bd8
- SHA512 0b435a19721d2ec177c070352d88b594cb7d4e83bf41f1014b590b619f87094cc70a8f9d407bd2b9c82f01d57113d2bc48ce469b376d2ccb1e2e9dee7eea2c1b
- SSDEEP 1536:AGN7c9SKiGN8fzvlNyHgmkAj62GGwqMr5oLU9yEwPpJWCpr5xoWDPUl33lg7qn/:xySFI8LHyHgTcGGwqE019xRLUlFg
- TLSH T173C3D00BEA8564F3F0160178218E93FA94FB9C329B1D269FCF91DCD62872614F5361C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_d27803cb9c13f321206f40cc303ac4b8_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_d27803cb9c13f321206f40cc303ac4b8_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_d27803cb9c13f321206f40cc303ac4b8_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 123KB
- SHA256 6541710e74a3654833d7476b824c6893f8e23121621e3a163037450fe883cf78
- MD5 d27803cb9c13f321206f40cc303ac4b8
- SHA1 c42925172ba09309139c9eef50eafa64df601bd8
- SHA512 0b435a19721d2ec177c070352d88b594cb7d4e83bf41f1014b590b619f87094cc70a8f9d407bd2b9c82f01d57113d2bc48ce469b376d2ccb1e2e9dee7eea2c1b
- SSDEEP 1536:AGN7c9SKiGN8fzvlNyHgmkAj62GGwqMr5oLU9yEwPpJWCpr5xoWDPUl33lg7qn/:xySFI8LHyHgTcGGwqE019xRLUlFg
- TLSH T173C3D00BEA8564F3F0160178218E93FA94FB9C329B1D269FCF91DCD62872614F5361C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents