General

  • Target
    2026-07-07_087e18a7666a82a93974f0bdfc755d23_elex_gh0st-rat_nitol_scribble_virut_wannacry
  • Size 64KB
  • Sample260707-3qj4msgz2n
  • SHA256 feb2d098a5d16130a7fbfd23e3f0da31720b331e6651a846bf609b0ea761bff8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-07_087e18a7666a82a93974f0bdfc755d23_elex_gh0st-rat_nitol_scribble_virut_wannacry
    • Size 64KB
    • SHA256 feb2d098a5d16130a7fbfd23e3f0da31720b331e6651a846bf609b0ea761bff8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks