2026-08-02_49af000e7512ce11dc04294f8d43a46e_elex_remcos_wannacry

General

Target
2026-08-02_49af000e7512ce11dc04294f8d43a46e_elex_remcos_wannacry
Size 84KB
Sample260802-xdds7sec43
SHA256 e003e2f31ebfe3f7b801f7b5ed547fff21bbb24be1b21d8f4da6e9a905bebc51
MD5 49af000e7512ce11dc04294f8d43a46e
SHA1 2ccf847d0e3410f3962dbf6046b9865adce8cc69
SHA512 827c9a2283141359f58fae92b668585fd296eb5b22656792fc731ac13a24b9c1a8bc5dc1c12e1694d92fec15f661d382ed75fe17449246d03fff9a5305d23a78
SSDEEP 768:rvw9816vhKQLroOo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oOoFM7PQcpMgDaLfnyS1loLDL
TLSH
T132836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_49af000e7512ce11dc04294f8d43a46e_elex_remcos_wannacry

SHA256 e003e2f31ebfe3f7b801f7b5ed547fff21bbb24be1b21d8f4da6e9a905bebc51
MD5 49af000e7512ce11dc04294f8d43a46e
SHA1 2ccf847d0e3410f3962dbf6046b9865adce8cc69
SHA512 827c9a2283141359f58fae92b668585fd296eb5b22656792fc731ac13a24b9c1a8bc5dc1c12e1694d92fec15f661d382ed75fe17449246d03fff9a5305d23a78
SSDEEP 768:rvw9816vhKQLroOo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oOoFM7PQcpMgDaLfnyS1loLDL
TLSH
T132836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths