stormser | 2026-08-11_35075ce4a0d74f6dbfcd407245d7c1f2_elex_remcos_wannacry

General

Target
2026-08-11_35075ce4a0d74f6dbfcd407245d7c1f2_elex_remcos_wannacry
Size 84KB
Sample260811-2w9e2stepe
SHA256 47576294d33e10deb806a59ae3a5b782e656bb2f945e0998fe43a1cd272582cb
MD5 35075ce4a0d74f6dbfcd407245d7c1f2
SHA1 c7b7427d8641587a29169cac47b170a6037aa49c
SHA512 508e57506d9327c14aedccf8ffecc34d02a5fe59bcbf7dd5a60d8fd3acf5b619cd8a94a25072ffc13e704182b2d7845675c6b50e96b5c66e947b4974227232aa
SSDEEP 384:6jibD2liXsafEHsc4g6FW6e/hHjNu4/CFsrdHWMZ:6jif24cafxi6FW7/hHjNu4/wQpWMZ
TLSH
T1C5832A435F9A7CF2F7911175046A8E79A76B89D4D1AEFE9FBF80CC084462541E83A306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm stormser

Family: Stormser, StormDDoS, StormAttack, Stormer
Stormser aka StormDDoS, StormAttack, and Stormer is a Windows worm written in C++.
worm stormser

Detects Stormser aka Storm DDoS and StormAttack 1 IoCs

resource	yara_rule
sample	family_stormser

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_35075ce4a0d74f6dbfcd407245d7c1f2_elex_remcos_wannacry

SHA256 47576294d33e10deb806a59ae3a5b782e656bb2f945e0998fe43a1cd272582cb
MD5 35075ce4a0d74f6dbfcd407245d7c1f2
SHA1 c7b7427d8641587a29169cac47b170a6037aa49c
SHA512 508e57506d9327c14aedccf8ffecc34d02a5fe59bcbf7dd5a60d8fd3acf5b619cd8a94a25072ffc13e704182b2d7845675c6b50e96b5c66e947b4974227232aa
SSDEEP 384:6jibD2liXsafEHsc4g6FW6e/hHjNu4/CFsrdHWMZ:6jif24cafxi6FW7/hHjNu4/wQpWMZ
TLSH
T1C5832A435F9A7CF2F7911175046A8E79A76B89D4D1AEFE9FBF80CC084462541E83A306
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths