General
- Target 2026-10-22_05b016875b191848bb8ebdc4fbe94bbb_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 81KB
- Sample261024-2r1mcaew5n
- SHA256 49c9bc91454d10d5ac5c70f5d9415aeb35c84baa9d3014609b599176c3dd285c
- MD5 05b016875b191848bb8ebdc4fbe94bbb
- SHA1 7ed973c99d5dc0a00e5f5d788f6133e1e2147309
- SHA512 21802d87d888a9aab3433cb4e62f198f53c5b87bdbb3c56d1b17373e2dd50861082bf4eb0aaf6027e9905c03dd709ab83423a8e2c1c8c3e0bd0912e70587b84e
- SSDEEP 768:damUkTe2uVf8VPZopRwqKDRPRDUVojyH6ojY9Pi7DTLfLPaYNl7trPCjuOKShyEj:da9iexVfeTV+ojyHDmq3TLjPayABvl7
- TLSH T12F83AE93EE4660E3E452007C7869A7FA59FF0C72871EA297DF50DC8128F5315F53A2A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_05b016875b191848bb8ebdc4fbe94bbb_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_05b016875b191848bb8ebdc4fbe94bbb_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_05b016875b191848bb8ebdc4fbe94bbb_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
- Size 81KB
- SHA256 49c9bc91454d10d5ac5c70f5d9415aeb35c84baa9d3014609b599176c3dd285c
- MD5 05b016875b191848bb8ebdc4fbe94bbb
- SHA1 7ed973c99d5dc0a00e5f5d788f6133e1e2147309
- SHA512 21802d87d888a9aab3433cb4e62f198f53c5b87bdbb3c56d1b17373e2dd50861082bf4eb0aaf6027e9905c03dd709ab83423a8e2c1c8c3e0bd0912e70587b84e
- SSDEEP 768:damUkTe2uVf8VPZopRwqKDRPRDUVojyH6ojY9Pi7DTLfLPaYNl7trPCjuOKShyEj:da9iexVfeTV+ojyHDmq3TLjPayABvl7
- TLSH T12F83AE93EE4660E3E452007C7869A7FA59FF0C72871EA297DF50DC8128F5315F53A2A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents