2026-08-02_47b8b8511dd2a5939459f980264102c6_elex_remcos_wannacry

General

Target
2026-08-02_47b8b8511dd2a5939459f980264102c6_elex_remcos_wannacry
Size 84KB
Sample260802-xebegazblb
SHA256 431923cd12394f228ebe4700fe49c2e3c4ba49caa9bbe8a95638338c7f2a1cef
MD5 47b8b8511dd2a5939459f980264102c6
SHA1 f642fbf3a922e4f4798d299d17894d5b8d593812
SHA512 ad1ce5e1c0065679d9dae75a45a2bca4164c8a6f61f8861ca3c8c28dd6d2cf314710b77bfee8bbde79904a1eaa2400641e3c57aeb13df20ef4b8e0b77ca7937f
SSDEEP 768:rvw9816vhKQLroAo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oAoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1DE836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_47b8b8511dd2a5939459f980264102c6_elex_remcos_wannacry

SHA256 431923cd12394f228ebe4700fe49c2e3c4ba49caa9bbe8a95638338c7f2a1cef
MD5 47b8b8511dd2a5939459f980264102c6
SHA1 f642fbf3a922e4f4798d299d17894d5b8d593812
SHA512 ad1ce5e1c0065679d9dae75a45a2bca4164c8a6f61f8861ca3c8c28dd6d2cf314710b77bfee8bbde79904a1eaa2400641e3c57aeb13df20ef4b8e0b77ca7937f
SSDEEP 768:rvw9816vhKQLroAo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oAoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1DE836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths