General
- Target 2026-09-13_6849acc668696a71d5fdaadfe9d3e53e_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 47KB
- Sample260913-rl1eaagp2z
- SHA256 09d5d06b9d84d4b025192aba1baf364de865441fbbea9a50e76d547d3a97930e
- MD5 6849acc668696a71d5fdaadfe9d3e53e
- SHA1 715eb1ee13253322494b987c1a997607a25f5226
- SHA512 31fa3e6d27369617fee12609df11f674f126e6b133227417cd1a4c81ddeaa5fc5ae61b9eb65b62ce6ff4e58a9964ad780ddb66f319c9bdc50be5a30f86c492f8
- SSDEEP 768:TPmYzyN7c9SKiGsU8fKKVuJvSrlNyHg95fppCFvIbk3Fu6jhYj:LGN7c9SKiGN8fzJlNyHm5+tIbk30ah4
- TLSH T19F237C07FD8514F3F1270078245FA3BA89BF8C75432EA597DF91CCD218B2425E97A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-13_6849acc668696a71d5fdaadfe9d3e53e_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_6849acc668696a71d5fdaadfe9d3e53e_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_6849acc668696a71d5fdaadfe9d3e53e_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 47KB
- SHA256 09d5d06b9d84d4b025192aba1baf364de865441fbbea9a50e76d547d3a97930e
- MD5 6849acc668696a71d5fdaadfe9d3e53e
- SHA1 715eb1ee13253322494b987c1a997607a25f5226
- SHA512 31fa3e6d27369617fee12609df11f674f126e6b133227417cd1a4c81ddeaa5fc5ae61b9eb65b62ce6ff4e58a9964ad780ddb66f319c9bdc50be5a30f86c492f8
- SSDEEP 768:TPmYzyN7c9SKiGsU8fKKVuJvSrlNyHg95fppCFvIbk3Fu6jhYj:LGN7c9SKiGN8fzJlNyHm5+tIbk30ah4
- TLSH T19F237C07FD8514F3F1270078245FA3BA89BF8C75432EA597DF91CCD218B2425E97A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents