General
- Target 2026-08-20_a40a20639d680cd203b1e89d876dadd3_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 496KB
- Sample260820-3m6s8sgd27
- SHA256 aeafb68547ea1103febb5d94ccaf8a54d82bb911e3afbd316d7feae96074fb76
- MD5 a40a20639d680cd203b1e89d876dadd3
- SHA1 d865792891ec6318d5264bf9951a963b7395043c
- SHA512 8b70204ff4269436f804ec4bcefbc49f8c59f8f510ec617d19fd815b26782eb5d75f9c1f56b3f1267727eec89e4781be525a0a94a541f75ec5db1c371a299ed5
- SSDEEP 3072:wkKh8/HIYNc0wTyzV9zwC9NdH7OJQAWuE+icrGgdDCvFxdZzEOOvxqJ:wkdwTyzVTdR+FnhWjZrOvY
- TLSH T11EB402576B8240F2CC1890BC7C7B67358BAFA8718A0D7242EB60DDCCD8B1F16DAB9155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a40a20639d680cd203b1e89d876dadd3_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a40a20639d680cd203b1e89d876dadd3_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a40a20639d680cd203b1e89d876dadd3_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
- Size 496KB
- SHA256 aeafb68547ea1103febb5d94ccaf8a54d82bb911e3afbd316d7feae96074fb76
- MD5 a40a20639d680cd203b1e89d876dadd3
- SHA1 d865792891ec6318d5264bf9951a963b7395043c
- SHA512 8b70204ff4269436f804ec4bcefbc49f8c59f8f510ec617d19fd815b26782eb5d75f9c1f56b3f1267727eec89e4781be525a0a94a541f75ec5db1c371a299ed5
- SSDEEP 3072:wkKh8/HIYNc0wTyzV9zwC9NdH7OJQAWuE+icrGgdDCvFxdZzEOOvxqJ:wkdwTyzVTdR+FnhWjZrOvY
- TLSH T11EB402576B8240F2CC1890BC7C7B67358BAFA8718A0D7242EB60DDCCD8B1F16DAB9155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents