General
- Target 2026-10-02_25f6b30114210fbe5591cb3cd976a010_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- Sample261003-s8hcnaea69
- SHA256 0037d15b79fd14cdd24330ff9e9438f0c9f26ce79cd982a490b7a27e9f62ac27
- MD5 25f6b30114210fbe5591cb3cd976a010
- SHA1 17424e9fdf6db98af919caa78858cbe9a87bed43
- SHA512 4b9d917c0cdaf42126620ca922cfccb1db650a77f206e795abdfd6887a3df2c481eba97b0a55db8bf806aa97752905231e46b0133ae86cddfad198e7537450db
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2f2HT:2zW4eyHJrfS//goCPZT3z/V2uHT
- TLSH T1E1337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-02_25f6b30114210fbe5591cb3cd976a010_elex_gh0st-rat_remcos_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_25f6b30114210fbe5591cb3cd976a010_elex_gh0st-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_25f6b30114210fbe5591cb3cd976a010_elex_gh0st-rat_remcos_wannacry
- Size 50KB
- SHA256 0037d15b79fd14cdd24330ff9e9438f0c9f26ce79cd982a490b7a27e9f62ac27
- MD5 25f6b30114210fbe5591cb3cd976a010
- SHA1 17424e9fdf6db98af919caa78858cbe9a87bed43
- SHA512 4b9d917c0cdaf42126620ca922cfccb1db650a77f206e795abdfd6887a3df2c481eba97b0a55db8bf806aa97752905231e46b0133ae86cddfad198e7537450db
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA2f2HT:2zW4eyHJrfS//goCPZT3z/V2uHT
- TLSH T1E1337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory