2026-08-09_3a436d0ed517bedeee1f89611a2ca3e4_elex_remcos_wannacry

General

Target
2026-08-09_3a436d0ed517bedeee1f89611a2ca3e4_elex_remcos_wannacry
Size 84KB
Sample260809-jp7nrstcle
SHA256 0143b0d22543c979682e056d72713a817248521635df56dbdfba0061cb53a08e
MD5 3a436d0ed517bedeee1f89611a2ca3e4
SHA1 12cbaba4840ac9f670371621d504cb9222e0f32d
SHA512 ee60212d366a6de27d1d98542ce8f46c3ae2d1313a6168444d0fa1ecdb2d133f694cbfb1ad23fd70f75c8b299e3133914927f0eeb9878b91a7f9428e90a50951
SSDEEP 768:rvw9816vhKQLroSo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oSoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1EA836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_3a436d0ed517bedeee1f89611a2ca3e4_elex_remcos_wannacry

SHA256 0143b0d22543c979682e056d72713a817248521635df56dbdfba0061cb53a08e
MD5 3a436d0ed517bedeee1f89611a2ca3e4
SHA1 12cbaba4840ac9f670371621d504cb9222e0f32d
SHA512 ee60212d366a6de27d1d98542ce8f46c3ae2d1313a6168444d0fa1ecdb2d133f694cbfb1ad23fd70f75c8b299e3133914927f0eeb9878b91a7f9428e90a50951
SSDEEP 768:rvw9816vhKQLroSo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oSoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1EA836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths