2026-08-09_61f9fa8f2a0ea0ab676857d8defeebfc_elex_remcos_wannacry

General

Target
2026-08-09_61f9fa8f2a0ea0ab676857d8defeebfc_elex_remcos_wannacry
Size 84KB
Sample260809-3y125axfla
SHA256 f46573a2907b2283628b081b6cb30fe4d976f53a92db7939162f407118d02849
MD5 61f9fa8f2a0ea0ab676857d8defeebfc
SHA1 e31fecc7c928c662c0d80b071fd32badb5ec2977
SHA512 155a0033590600af9e3e95546b20004fc77163e0ae258f6c4a79b11ba3d1d9c5568f6842c101998d04f8400c6f2c6af919f6f1564aa55763d314d806729237a3
SSDEEP 768:rvw9816vhKQLroro4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oroFM7PQcpMgDaLfnyS1loLDL
TLSH
T1A4836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_61f9fa8f2a0ea0ab676857d8defeebfc_elex_remcos_wannacry

SHA256 f46573a2907b2283628b081b6cb30fe4d976f53a92db7939162f407118d02849
MD5 61f9fa8f2a0ea0ab676857d8defeebfc
SHA1 e31fecc7c928c662c0d80b071fd32badb5ec2977
SHA512 155a0033590600af9e3e95546b20004fc77163e0ae258f6c4a79b11ba3d1d9c5568f6842c101998d04f8400c6f2c6af919f6f1564aa55763d314d806729237a3
SSDEEP 768:rvw9816vhKQLroro4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oroFM7PQcpMgDaLfnyS1loLDL
TLSH
T1A4836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths