General
- Target 2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 4.8MB
- Sample260819-qerywsvdlb
- SHA256 548e79e9bf261965f0d8453399948e0e78e9d8a328d435da50183809d16ebcb8
- MD5 7f31d4906f086e358caf1886b80aeb56
- SHA1 828a859fa5df8e8f4bb1b79ab6d0fc4be0c8a57e
- SHA512 16ff29c2030324980c015fd6355f0ac0a6cee192af9d0f091f95a9e8ab2667b6dfc00db1547ba799894248a3001e787dd62554f731e746b9ef5d6bde813ff27f
- SSDEEP 98304:tShJpfL5uGJ6vrvk443ie6ZSc52ASn0oBnw3XCGUf:+3T5uGSANye6oW1HoBnwC
- TLSH T1CD3623A4E342C5A8EDAF583076954A66BB7D24270D0A8773D3D24C193E303EAE591F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry
- Size 4.8MB
- SHA256 548e79e9bf261965f0d8453399948e0e78e9d8a328d435da50183809d16ebcb8
- MD5 7f31d4906f086e358caf1886b80aeb56
- SHA1 828a859fa5df8e8f4bb1b79ab6d0fc4be0c8a57e
- SHA512 16ff29c2030324980c015fd6355f0ac0a6cee192af9d0f091f95a9e8ab2667b6dfc00db1547ba799894248a3001e787dd62554f731e746b9ef5d6bde813ff27f
- SSDEEP 98304:tShJpfL5uGJ6vrvk443ie6ZSc52ASn0oBnw3XCGUf:+3T5uGSANye6oW1HoBnwC
- TLSH T1CD3623A4E342C5A8EDAF583076954A66BB7D24270D0A8773D3D24C193E303EAE591F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Detects Windows executables referencing non-Windows User-Agents
-
Drops file in System32 directory