General

  • Target
    2026-10-22_374762d91953b353d406b8a2cf39c87b_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
  • Size 121KB
  • Sample261024-t77ftsvzaz
  • SHA256 e6183f2db60f4141967b7a5cadd0554601d3c4b406f2e29b252bbc5730f8f698
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-22_374762d91953b353d406b8a2cf39c87b_elex_gh0st-rat_remcos_scribble_strictor_virut_wannacry
    • Size 121KB
    • SHA256 e6183f2db60f4141967b7a5cadd0554601d3c4b406f2e29b252bbc5730f8f698
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Detects Windows executables referencing non-Windows User-Agents

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks