stormser | 2026-06-27_5fa5afee5a0bd39aa518bf577976c51b_elex_wannacry

General

Target
2026-06-27_5fa5afee5a0bd39aa518bf577976c51b_elex_wannacry
Size 76KB
Sample260629-hm64sahs2p
SHA256 4b4d4d724bd3850490be010acb463bbd57d78b9499406c24a167b9524a085cd3
MD5 5fa5afee5a0bd39aa518bf577976c51b
SHA1 07ce561d94fe4551ea81e89a2888a721e2406efa
SHA512 5e63e971447bcfd880793a4c1c4cc2554401d2020a62b4b946c81ce7edec867dca23a9c6408660dddaf816ffd84ac12f2f3371def941d04a518468f3c54fecdd
SSDEEP 768:vvw9816vhKQLroOx4/wQxWMZQcpFM1FgDagXP2TyS1tl7lfqvocqcdT3WVd:nEGh0oOxlwWMZQcpmgDagIyS1loL7Wr
TLSH
T197735B02A684B5F2EBAC0134B19F0F7E963796B1C0D9682F6F634DA55862C63F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm stormser

Family: Stormser, StormDDoS, StormAttack, Stormer
Stormser aka StormDDoS, StormAttack, and Stormer is a Windows worm written in C++.
worm stormser

Detects Stormser aka Storm DDoS and StormAttack 1 IoCs

resource	yara_rule
sample	family_stormser

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_5fa5afee5a0bd39aa518bf577976c51b_elex_wannacry

SHA256 4b4d4d724bd3850490be010acb463bbd57d78b9499406c24a167b9524a085cd3
MD5 5fa5afee5a0bd39aa518bf577976c51b
SHA1 07ce561d94fe4551ea81e89a2888a721e2406efa
SHA512 5e63e971447bcfd880793a4c1c4cc2554401d2020a62b4b946c81ce7edec867dca23a9c6408660dddaf816ffd84ac12f2f3371def941d04a518468f3c54fecdd
SSDEEP 768:vvw9816vhKQLroOx4/wQxWMZQcpFM1FgDagXP2TyS1tl7lfqvocqcdT3WVd:nEGh0oOxlwWMZQcpmgDagIyS1loL7Wr
TLSH
T197735B02A684B5F2EBAC0134B19F0F7E963796B1C0D9682F6F634DA55862C63F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths