General
- Target 2026-10-22_068984aebc2ef863b29bd3d338a7592d_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 81KB
- Sample261024-2nzwmsxvft
- SHA256 80052367d0ff39e24b92c62a02aa31959bc2f736dbf93a1a844e42e4f8a36a14
- MD5 068984aebc2ef863b29bd3d338a7592d
- SHA1 562576dafe60c6294a4aea05b963e579a9f2759d
- SHA512 30d1102809b689888c2aaaf0df3ff42958707faa27e0eeb4cba21d6af09c8a27e329f4c726ca8fa3fb9b859df1ba3569221b7deb7885527d47aa6a8e6318be88
- SSDEEP 768:damUkTe2uVf8VPZULRpRwqKDRPRDUVojyH6ojY9Pino+TLfLPaYNl7trPCjuWrml:da9iexVfeqWV+ojyHDmqRTLjPayAql7
- TLSH T14F839E53EE8650E3E452007C3869A7F699BF0C72471FA297DF50DC8128F5215F63A2E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_068984aebc2ef863b29bd3d338a7592d_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_068984aebc2ef863b29bd3d338a7592d_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_068984aebc2ef863b29bd3d338a7592d_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 81KB
- SHA256 80052367d0ff39e24b92c62a02aa31959bc2f736dbf93a1a844e42e4f8a36a14
- MD5 068984aebc2ef863b29bd3d338a7592d
- SHA1 562576dafe60c6294a4aea05b963e579a9f2759d
- SHA512 30d1102809b689888c2aaaf0df3ff42958707faa27e0eeb4cba21d6af09c8a27e329f4c726ca8fa3fb9b859df1ba3569221b7deb7885527d47aa6a8e6318be88
- SSDEEP 768:damUkTe2uVf8VPZULRpRwqKDRPRDUVojyH6ojY9Pino+TLfLPaYNl7trPCjuWrml:da9iexVfeqWV+ojyHDmqRTLjPayAql7
- TLSH T14F839E53EE8650E3E452007C3869A7F699BF0C72471FA297DF50DC8128F5215F63A2E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents