stormser | 2026-06-27_9df40226a75cbd38a4c69d6965fd03bf_elex_wannacry

General

Target
2026-06-27_9df40226a75cbd38a4c69d6965fd03bf_elex_wannacry
Size 76KB
Sample260629-e75vnset8l
SHA256 17639a7f46c29aaf744435eb1ba08505896475d773a90b2ddc97a2eb3f3f5096
MD5 9df40226a75cbd38a4c69d6965fd03bf
SHA1 5f59e97f4cb70c07d5161f7d56d6509e534a7cde
SHA512 ac5bf67e2b450e2d457fcc42ccb44b9e2b9c79727eb48834d3da6099694d7908fe333a84e85917a0ecf3b0c0573df3ef227aa7366fc2796593f3a7e48e7888f5
SSDEEP 768:vvw9816vhKQLrokx4/wQxWMZQcpFM1FgDagXP2TyS1tl7lfqvocqcdT3WVd:nEGh0okxlwWMZQcpmgDagIyS1loL7Wr
TLSH
T131735B02A684B5F2EBAC0134B19F0F7E963796B1C0D9682F6F634DA55862C63F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm stormser

Family: Stormser, StormDDoS, StormAttack, Stormer
Stormser aka StormDDoS, StormAttack, and Stormer is a Windows worm written in C++.
worm stormser

Detects Stormser aka Storm DDoS and StormAttack 1 IoCs

resource	yara_rule
sample	family_stormser

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_9df40226a75cbd38a4c69d6965fd03bf_elex_wannacry

SHA256 17639a7f46c29aaf744435eb1ba08505896475d773a90b2ddc97a2eb3f3f5096
MD5 9df40226a75cbd38a4c69d6965fd03bf
SHA1 5f59e97f4cb70c07d5161f7d56d6509e534a7cde
SHA512 ac5bf67e2b450e2d457fcc42ccb44b9e2b9c79727eb48834d3da6099694d7908fe333a84e85917a0ecf3b0c0573df3ef227aa7366fc2796593f3a7e48e7888f5
SSDEEP 768:vvw9816vhKQLrokx4/wQxWMZQcpFM1FgDagXP2TyS1tl7lfqvocqcdT3WVd:nEGh0okxlwWMZQcpmgDagIyS1loL7Wr
TLSH
T131735B02A684B5F2EBAC0134B19F0F7E963796B1C0D9682F6F634DA55862C63F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths