General
- Target 2026-10-16_6fef1b6cfb84efc89b85d20e43abfeea_elex_gh0st-rat_remcos_scribble_strictor_wannacry
- Size 48KB
- Sample261017-saffeavzds
- SHA256 583c5ce10c513e5717299783297f66e34f34aa2c57ba3c949b01474a1c5ed0ec
- MD5 6fef1b6cfb84efc89b85d20e43abfeea
- SHA1 e06fa0b3f11e5e36524809820c95dcc44c30eeef
- SHA512 71639e8afbfc8c325c0fab07edbe9aad4c985d8a0ab98cfc7ae7a3180eb38d13affec40352cc4098d07cc7828ce052dc05906028e0909fb39b2dddfa463b53ec
- SSDEEP 768:7TT8R3ev8GEe854yRVnQbhcdqDMhYgfyHRVZHOYcV:7f8R8+54yRVnQdufyHRjuYu
- TLSH T1E623E60BED8448F1F42A60F7640AA7FB52E32871590FA746AF41DCDD2C75A2BED2520D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-16_6fef1b6cfb84efc89b85d20e43abfeea_elex_gh0st-rat_remcos_scribble_strictor_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_6fef1b6cfb84efc89b85d20e43abfeea_elex_gh0st-rat_remcos_scribble_strictor_wannacry.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_6fef1b6cfb84efc89b85d20e43abfeea_elex_gh0st-rat_remcos_scribble_strictor_wannacry
- Size 48KB
- SHA256 583c5ce10c513e5717299783297f66e34f34aa2c57ba3c949b01474a1c5ed0ec
- MD5 6fef1b6cfb84efc89b85d20e43abfeea
- SHA1 e06fa0b3f11e5e36524809820c95dcc44c30eeef
- SHA512 71639e8afbfc8c325c0fab07edbe9aad4c985d8a0ab98cfc7ae7a3180eb38d13affec40352cc4098d07cc7828ce052dc05906028e0909fb39b2dddfa463b53ec
- SSDEEP 768:7TT8R3ev8GEe854yRVnQbhcdqDMhYgfyHRVZHOYcV:7f8R8+54yRVnQdufyHRjuYu
- TLSH T1E623E60BED8448F1F42A60F7640AA7FB52E32871590FA746AF41DCDD2C75A2BED2520D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory