2026-08-13_488c7488858105f44570dec3e73a733c_elex_remcos_wannacry

General

Target
2026-08-13_488c7488858105f44570dec3e73a733c_elex_remcos_wannacry
Size 84KB
Sample260813-lrpxvaeq81
SHA256 e6acabd5d573c8f72df71e83fdea5d15f3e943e3b30980e7f48f53b7d06b79d2
MD5 488c7488858105f44570dec3e73a733c
SHA1 4aff1d29b4d9c9903bf07171917facf2e98649fe
SHA512 4c20659613101a41923367f88eb2f20a256849e296a79c1106ce0a33e57845e660a6d0346ae6703ab2968371617255a44da55c0e7d9cb94063553505d21ac59c
SSDEEP 768:rvw9816vhKQLrofo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0ofoFM7PQcpMgDaLfnyS1loLDL
TLSH
T116836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_488c7488858105f44570dec3e73a733c_elex_remcos_wannacry

SHA256 e6acabd5d573c8f72df71e83fdea5d15f3e943e3b30980e7f48f53b7d06b79d2
MD5 488c7488858105f44570dec3e73a733c
SHA1 4aff1d29b4d9c9903bf07171917facf2e98649fe
SHA512 4c20659613101a41923367f88eb2f20a256849e296a79c1106ce0a33e57845e660a6d0346ae6703ab2968371617255a44da55c0e7d9cb94063553505d21ac59c
SSDEEP 768:rvw9816vhKQLrofo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0ofoFM7PQcpMgDaLfnyS1loLDL
TLSH
T116836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths