General

  • Target
    2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry
  • Size 4.8MB
  • Sample260819-qerywsvdlb
  • SHA256 548e79e9bf261965f0d8453399948e0e78e9d8a328d435da50183809d16ebcb8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-19_7f31d4906f086e358caf1886b80aeb56_elex_gh0st-rat_scribble_strictor_virut_wannacry
    • Size 4.8MB
    • SHA256 548e79e9bf261965f0d8453399948e0e78e9d8a328d435da50183809d16ebcb8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks