General

  • Target
    2026-07-08_8fa992848407128f2ebd4308c55f66a5_elex_gh0st-rat_scribble_strictor_virut_wannacry
  • Size 81KB
  • Sample260708-kc87hads8w
  • SHA256 586f727f4d6b6029758ebf7751bb0d8245f343e84477ee31f00d1bd1094b7e07
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-08_8fa992848407128f2ebd4308c55f66a5_elex_gh0st-rat_scribble_strictor_virut_wannacry
    • Size 81KB
    • SHA256 586f727f4d6b6029758ebf7751bb0d8245f343e84477ee31f00d1bd1094b7e07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Windows executables referencing non-Windows User-Agents

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks