stormser | 2026-08-12_33e6f2b21f8b77223a17c54656b4ad11_elex_remcos_wannacry

General

Target
2026-08-12_33e6f2b21f8b77223a17c54656b4ad11_elex_remcos_wannacry
Size 84KB
Sample260813-bwebssxwes
SHA256 d3f4946f787dab1444dd8a62846365e126f9ade61f32d95404768c7bd6b4f031
MD5 33e6f2b21f8b77223a17c54656b4ad11
SHA1 bd76e805dfd42622216a6e5ceb766ab585de7df5
SHA512 e6c85b32ec37ff08a69211139d0f61ac50a559ee81c08fa279e2465237a1ebe7da3058dca2d7e096c25a61ca2cbf722c27fd74d9d923b5eb4a2619dc6f8d1ca0
SSDEEP 384:6jibD2liXsafEHsc4g6FW6e/hHjNva4/CFsrdHWMZ:6jif24cafxi6FW7/hHjNva4/wQpWMZ
TLSH
T1AC832A435F9A7CF2F7911175046A8E79A76B89D4D1AEFE9FBF80CC084462641E83A306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

worm stormser

Family: Stormser, StormDDoS, StormAttack, Stormer
Stormser aka StormDDoS, StormAttack, and Stormer is a Windows worm written in C++.
worm stormser

Detects Stormser aka Storm DDoS and StormAttack 1 IoCs

resource	yara_rule
sample	family_stormser

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_33e6f2b21f8b77223a17c54656b4ad11_elex_remcos_wannacry

SHA256 d3f4946f787dab1444dd8a62846365e126f9ade61f32d95404768c7bd6b4f031
MD5 33e6f2b21f8b77223a17c54656b4ad11
SHA1 bd76e805dfd42622216a6e5ceb766ab585de7df5
SHA512 e6c85b32ec37ff08a69211139d0f61ac50a559ee81c08fa279e2465237a1ebe7da3058dca2d7e096c25a61ca2cbf722c27fd74d9d923b5eb4a2619dc6f8d1ca0
SSDEEP 384:6jibD2liXsafEHsc4g6FW6e/hHjNva4/CFsrdHWMZ:6jif24cafxi6FW7/hHjNva4/wQpWMZ
TLSH
T1AC832A435F9A7CF2F7911175046A8E79A76B89D4D1AEFE9FBF80CC084462641E83A306
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths