General
- Target 2026-08-18_000a8e46b486e54f65138bb2d5f53244_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260818-sw41wsaa25
- SHA256 68b5bf8fd93ce3f38365ef7aecb027c606e6ca5db8428d9c90ae80546a8be98d
- MD5 000a8e46b486e54f65138bb2d5f53244
- SHA1 6903b8fb9ee6c7b5fa3f99932caca668027e28c2
- SHA512 2f60d75b083617e791daed8c4c8d6a2516c51e5075abb52e5fa95c64be755b0becfea8fab9963cb231183434764d11c5b7eaaed5d72546be3dcf66433b39ccfa
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2O2HT:2zW4eyHJrfS//goCPZT3z/V2pHT
- TLSH T18D337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-18_000a8e46b486e54f65138bb2d5f53244_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_000a8e46b486e54f65138bb2d5f53244_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_000a8e46b486e54f65138bb2d5f53244_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 68b5bf8fd93ce3f38365ef7aecb027c606e6ca5db8428d9c90ae80546a8be98d
- MD5 000a8e46b486e54f65138bb2d5f53244
- SHA1 6903b8fb9ee6c7b5fa3f99932caca668027e28c2
- SHA512 2f60d75b083617e791daed8c4c8d6a2516c51e5075abb52e5fa95c64be755b0becfea8fab9963cb231183434764d11c5b7eaaed5d72546be3dcf66433b39ccfa
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2O2HT:2zW4eyHJrfS//goCPZT3z/V2pHT
- TLSH T18D337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory