General

  • Target
    2026-08-08_91af6783edb8a8c18bf59d10815d4cee_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
  • Size 65KB
  • Sample260808-s9ctkazdka
  • SHA256 45032c8905b187fa7b1024d13f728b5f0621a840f4f263969f39a6664fa238c1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-08_91af6783edb8a8c18bf59d10815d4cee_elex_gh0st-rat_nitol_remcos_scribble_virut_wannacry
    • Size 65KB
    • SHA256 45032c8905b187fa7b1024d13f728b5f0621a840f4f263969f39a6664fa238c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks