General
- Target 2026-10-17_a77e2ac723409650fcc29caa9166995d_elex_remcos_scribble_strictor_virut_wannacry
- Size 665KB
- Sample261018-15aseabs5v
- SHA256 b699d3a9679c722d95e4619d26a434bd518eb9c5b442d2eeea8c72efd37a2d7b
- MD5 a77e2ac723409650fcc29caa9166995d
- SHA1 b746d1f7fd768c74cd387bfdca12067a828760e1
- SHA512 7280849b7f72e1aaad247619829a25affe61068304715d1362e514585b202d8460ba5526bbc73342953f2fdbabcef2cc3176cf8aeabc3829161d92483b5646ad
- SSDEEP 12288:vbc1yrrt6rrrrrrrrrrrrrrrrSDmrSgSxcgozKVpaHl5q6e11VFuFJPpuPyB+uuv:vY1yrrt6rrrrrrrrrrrrrrrrSfXoz0Yw
- TLSH T1F1E423A775E6E0B2C9A810360962D3F7DB370C761E29D361BBA6CDC19830660B572F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-17_a77e2ac723409650fcc29caa9166995d_elex_remcos_scribble_strictor_virut_wannacry.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_a77e2ac723409650fcc29caa9166995d_elex_remcos_scribble_strictor_virut_wannacry.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_a77e2ac723409650fcc29caa9166995d_elex_remcos_scribble_strictor_virut_wannacry
- Size 665KB
- SHA256 b699d3a9679c722d95e4619d26a434bd518eb9c5b442d2eeea8c72efd37a2d7b
- MD5 a77e2ac723409650fcc29caa9166995d
- SHA1 b746d1f7fd768c74cd387bfdca12067a828760e1
- SHA512 7280849b7f72e1aaad247619829a25affe61068304715d1362e514585b202d8460ba5526bbc73342953f2fdbabcef2cc3176cf8aeabc3829161d92483b5646ad
- SSDEEP 12288:vbc1yrrt6rrrrrrrrrrrrrrrrSDmrSgSxcgozKVpaHl5q6e11VFuFJPpuPyB+uuv:vY1yrrt6rrrrrrrrrrrrrrrrSfXoz0Yw
- TLSH T1F1E423A775E6E0B2C9A810360962D3F7DB370C761E29D361BBA6CDC19830660B572F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies firewall policy service
- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Drops file in Drivers directory
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Create or Modify System Process
1Windows Service
1Process Injection
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1Process Injection
1