2026-08-09_0fe4c4a41a0c15654d6d91986978a6bf_elex_remcos_wannacry

General

Target
2026-08-09_0fe4c4a41a0c15654d6d91986978a6bf_elex_remcos_wannacry
Size 84KB
Sample260809-ncdblsab93
SHA256 ee732f9425735e6bc98289589c3d658b421b84699cdab41e7599621a12422eed
MD5 0fe4c4a41a0c15654d6d91986978a6bf
SHA1 14918a7e13882c554c80a92c8b7b1bbb7030d135
SHA512 afa1a205d8222d24941bf13e306c50e80c6417c68677791c10c318fcb5b288bd8ca9221b7e98b7ac7d495a5a0615914f093e8cbb66cb5aec43f3d27e3148d8d3
SSDEEP 768:rvw9816vhKQLroto4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0otoFM7PQcpMgDaLfnyS1loLDL
TLSH
T101836C03A684B5F2EB6C0135B19F0F7E963B86B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_0fe4c4a41a0c15654d6d91986978a6bf_elex_remcos_wannacry

SHA256 ee732f9425735e6bc98289589c3d658b421b84699cdab41e7599621a12422eed
MD5 0fe4c4a41a0c15654d6d91986978a6bf
SHA1 14918a7e13882c554c80a92c8b7b1bbb7030d135
SHA512 afa1a205d8222d24941bf13e306c50e80c6417c68677791c10c318fcb5b288bd8ca9221b7e98b7ac7d495a5a0615914f093e8cbb66cb5aec43f3d27e3148d8d3
SSDEEP 768:rvw9816vhKQLroto4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0otoFM7PQcpMgDaLfnyS1loLDL
TLSH
T101836C03A684B5F2EB6C0135B19F0F7E963B86B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths