2026-08-12_26bff725f1ed039af38fec8aa6380867_elex_remcos_wannacry

General

Target
2026-08-12_26bff725f1ed039af38fec8aa6380867_elex_remcos_wannacry
Size 84KB
Sample260812-jb97qsbc23
SHA256 09da5dd72964f47dece411adeb4f88d92769857a3befebf713e49be47ebf2add
MD5 26bff725f1ed039af38fec8aa6380867
SHA1 b2ac1737ec837778ad0feda3945c5014d99cdc86
SHA512 79bc66f5f1960702c9e9f200641d4ffcc9b4d3d99113d163085379451f4254c4f24d2c06f5dfc3482a614c1d9d18fd35fab62671c614d126be3da7dc0fd1dfbb
SSDEEP 768:rvw9816vhKQLroVo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oVoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1CE836C03A684B5F2EB6C0135B19F0F7E963786B1C4C8682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_26bff725f1ed039af38fec8aa6380867_elex_remcos_wannacry

SHA256 09da5dd72964f47dece411adeb4f88d92769857a3befebf713e49be47ebf2add
MD5 26bff725f1ed039af38fec8aa6380867
SHA1 b2ac1737ec837778ad0feda3945c5014d99cdc86
SHA512 79bc66f5f1960702c9e9f200641d4ffcc9b4d3d99113d163085379451f4254c4f24d2c06f5dfc3482a614c1d9d18fd35fab62671c614d126be3da7dc0fd1dfbb
SSDEEP 768:rvw9816vhKQLroVo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oVoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1CE836C03A684B5F2EB6C0135B19F0F7E963786B1C4C8682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths