2026-08-02_9ca23a9867f54a1d122b20147a0d52c4_elex_remcos_wannacry

General

Target
2026-08-02_9ca23a9867f54a1d122b20147a0d52c4_elex_remcos_wannacry
Size 84KB
Sample260802-dbdwms11as
SHA256 b7b39f452552e30a03c79d1a997a49f1de653b87c361fceb7ca195d6d1a8d5ff
MD5 9ca23a9867f54a1d122b20147a0d52c4
SHA1 dc0bf254f48a759e3bd8fd92ce01cf90aef0899f
SHA512 8669c81ddb76751fe58ef320a3f325cc6a347419ba0a0212d200e05ce58124b73a64a948f0c5963e81c90dabdce2d6a2ce1ec0534378e7393835d84deb79f6ce
SSDEEP 768:rvw9816vhKQLropo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0opoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1C3836C03A684B5F2EB6C0135B19F0F7E963786B1C0C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_9ca23a9867f54a1d122b20147a0d52c4_elex_remcos_wannacry

SHA256 b7b39f452552e30a03c79d1a997a49f1de653b87c361fceb7ca195d6d1a8d5ff
MD5 9ca23a9867f54a1d122b20147a0d52c4
SHA1 dc0bf254f48a759e3bd8fd92ce01cf90aef0899f
SHA512 8669c81ddb76751fe58ef320a3f325cc6a347419ba0a0212d200e05ce58124b73a64a948f0c5963e81c90dabdce2d6a2ce1ec0534378e7393835d84deb79f6ce
SSDEEP 768:rvw9816vhKQLropo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0opoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1C3836C03A684B5F2EB6C0135B19F0F7E963786B1C0C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths