2026-08-14_c5a5b5a932c6133a4dc9c1190d0acd06_elex_remcos_wannacry

General

Target
2026-08-14_c5a5b5a932c6133a4dc9c1190d0acd06_elex_remcos_wannacry
Size 84KB
Sample260814-psfx4stycx
SHA256 68f3f3661b6ebd6a881e5ad9e8a34c6eeecf8632f493cefec850465aa3b0671b
MD5 c5a5b5a932c6133a4dc9c1190d0acd06
SHA1 f3bb5fcf89131d383c17e9a70d1f439d4273f086
SHA512 ef7a5c9d6b62b8b90d1e8671c450f497950904a8a61b5ee34b7340f6f0fc66a4e13b495b7ef3542bd486fc373334d87c68a8629e5cbb30ba9906064aeb37b72e
SSDEEP 768:rvw9816vhKQLroxo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oxoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1C9836C03A584B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_c5a5b5a932c6133a4dc9c1190d0acd06_elex_remcos_wannacry

SHA256 68f3f3661b6ebd6a881e5ad9e8a34c6eeecf8632f493cefec850465aa3b0671b
MD5 c5a5b5a932c6133a4dc9c1190d0acd06
SHA1 f3bb5fcf89131d383c17e9a70d1f439d4273f086
SHA512 ef7a5c9d6b62b8b90d1e8671c450f497950904a8a61b5ee34b7340f6f0fc66a4e13b495b7ef3542bd486fc373334d87c68a8629e5cbb30ba9906064aeb37b72e
SSDEEP 768:rvw9816vhKQLroxo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oxoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1C9836C03A584B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths