2026-08-02_00e8c9bdabee63b2f7c64bd524a656d6_elex_remcos_wannacry

General

Target
2026-08-02_00e8c9bdabee63b2f7c64bd524a656d6_elex_remcos_wannacry
Size 76KB
Sample260802-g834ksem2v
SHA256 f9ba06bccc425dd90ab80cecb20ba953e929f7b64f749067862c169f9c2f7faa
MD5 00e8c9bdabee63b2f7c64bd524a656d6
SHA1 7c3ad01b3fc56a26185c033ee728419cf9a33301
SHA512 40727829c186b2ad319d50102fe75f8d695925022048af3b22f7404008eaecd92cd82bc187f5195fbdffbb780b2258f991c01512f77c225f255c9bbef8e9fb55
SSDEEP 768:vvw9816vhKQLrot/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0ot/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T123736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_00e8c9bdabee63b2f7c64bd524a656d6_elex_remcos_wannacry

SHA256 f9ba06bccc425dd90ab80cecb20ba953e929f7b64f749067862c169f9c2f7faa
MD5 00e8c9bdabee63b2f7c64bd524a656d6
SHA1 7c3ad01b3fc56a26185c033ee728419cf9a33301
SHA512 40727829c186b2ad319d50102fe75f8d695925022048af3b22f7404008eaecd92cd82bc187f5195fbdffbb780b2258f991c01512f77c225f255c9bbef8e9fb55
SSDEEP 768:vvw9816vhKQLrot/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0ot/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T123736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths