General
- Target 2026-09-01_7748177bd17181c7b9f3823101eee101_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample260903-lkkdsatepd
- SHA256 f499d42975807266a05a7da4ef2c80c3c5bec04600833bf63f7d8f3f4acef13a
- MD5 7748177bd17181c7b9f3823101eee101
- SHA1 2494d61d626ea8c223c184c228dc99e0febd80d2
- SHA512 0ca11f02f8712363d95b4aa976f5c2038dce479be293f5697f8a22ca18c49f1163d66e8a7f130132f740209452cfc792b5bb4b2b11529302ecac3615accf0614
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbs+E23zNdoTA232HM:2zW4eyHJrfS//goCPZe3z/V2mHM
- TLSH T108337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAB80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-01_7748177bd17181c7b9f3823101eee101_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_7748177bd17181c7b9f3823101eee101_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_7748177bd17181c7b9f3823101eee101_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 f499d42975807266a05a7da4ef2c80c3c5bec04600833bf63f7d8f3f4acef13a
- MD5 7748177bd17181c7b9f3823101eee101
- SHA1 2494d61d626ea8c223c184c228dc99e0febd80d2
- SHA512 0ca11f02f8712363d95b4aa976f5c2038dce479be293f5697f8a22ca18c49f1163d66e8a7f130132f740209452cfc792b5bb4b2b11529302ecac3615accf0614
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbs+E23zNdoTA232HM:2zW4eyHJrfS//goCPZe3z/V2mHM
- TLSH T108337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAB80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory