stormser | 2026-06-05_87eaaa34d7059dd589f07c7a69d91636_elex_wannacry

General

Target
2026-06-05_87eaaa34d7059dd589f07c7a69d91636_elex_wannacry
Size 66KB
Sample260605-qaattaf15x
SHA256 6ffe2654663c75e8e6dc9cdbe175883bf24f4dc2e9d427bdde26524acc0c164d
MD5 87eaaa34d7059dd589f07c7a69d91636
SHA1 5254dd88f34e4795e5321fe10124a3d8823b8e0c
SHA512 fd9ea6f53c23ef0e3d9a8c50b5beab9b94137961cc8b3bf15325808da25dbccb442ead0101a2fdfc0fa7131049ded24b651ab1e8f607f6f1e15535cbcccd4607
SSDEEP 384:PbLwOs8AHsc4sMfwhKQLroH4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLroH4/wQWdYUaK+ItI
TLSH
T12C632A831BD818E3F5861B38187586768D77F6D4401EBD6B6B80CE8F086F992D13E356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm stormser

Family: Stormser, StormDDoS, StormAttack, Stormer
Stormser aka StormDDoS, StormAttack, and Stormer is a Windows worm written in C++.
worm stormser

Detects Stormser aka Storm DDoS and StormAttack 1 IoCs

resource	yara_rule
sample	family_stormser

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-05_87eaaa34d7059dd589f07c7a69d91636_elex_wannacry

SHA256 6ffe2654663c75e8e6dc9cdbe175883bf24f4dc2e9d427bdde26524acc0c164d
MD5 87eaaa34d7059dd589f07c7a69d91636
SHA1 5254dd88f34e4795e5321fe10124a3d8823b8e0c
SHA512 fd9ea6f53c23ef0e3d9a8c50b5beab9b94137961cc8b3bf15325808da25dbccb442ead0101a2fdfc0fa7131049ded24b651ab1e8f607f6f1e15535cbcccd4607
SSDEEP 384:PbLwOs8AHsc4sMfwhKQLroH4/CFsrdId1qrYs7KdyPIP1P0f:Pvw9816vhKQLroH4/wQWdYUaK+ItI
TLSH
T12C632A831BD818E3F5861B38187586768D77F6D4401EBD6B6B80CE8F086F992D13E356
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths