General

  • Target
    2026-11-07_c134983d0b38e5b7aaa0061e4a28681f_elex_gh0st-rat_remcos_wannacry
  • Size 50KB
  • Sample261107-mf2b6sct6m
  • SHA256 04716b1cd6f15d4897f1bccdab7089a706dcda3607b34433ed3c05e7236c658e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-11-07_c134983d0b38e5b7aaa0061e4a28681f_elex_gh0st-rat_remcos_wannacry
    • Size 50KB
    • SHA256 04716b1cd6f15d4897f1bccdab7089a706dcda3607b34433ed3c05e7236c658e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Custom signature

      Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks