General

  • Target
    2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry
  • Size 65KB
  • Sample260710-fpzflsew4t
  • SHA256 e755da66ef000ee6b9034ab33c7b29f4e0932aad227c3badc46ae7e217e76e7f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-10_e02c2ceede316d995821f716b57594d4_elex_gh0st-rat_nitol_scribble_virut_wannacry
    • Size 65KB
    • SHA256 e755da66ef000ee6b9034ab33c7b29f4e0932aad227c3badc46ae7e217e76e7f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks