General

  • Target
    2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry
  • Size 62KB
  • Sample260715-l2evmahs4m
  • SHA256 c2e0b98dfe1d9636e72f4999f76f9c859a496a6d25d6c3bca9249d078703e81c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-15_615864e283d9807a580651f6b567a158_elex_gh0st-rat_nitol_scribble_virut_wannacry
    • Size 62KB
    • SHA256 c2e0b98dfe1d9636e72f4999f76f9c859a496a6d25d6c3bca9249d078703e81c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks