2026-08-15_f0b1cc0355ba3de6bafc83fb86542dfe_elex_remcos_wannacry

General

Target
2026-08-15_f0b1cc0355ba3de6bafc83fb86542dfe_elex_remcos_wannacry
Size 84KB
Sample260815-mfkdnafb64
SHA256 0e917f0681ed8a321bd303814711ffa1d23a5143a3fd7f3ab31cb048851918e2
MD5 f0b1cc0355ba3de6bafc83fb86542dfe
SHA1 1980177775c91fcbd0df47f4bd171401cbaa141b
SHA512 424685f54d88638c4875beb58084bed08abfc5b66102bd0cbea18e015d21dc24c7280a5f42a233320aa99eeadae9f1252353cdf9f38ba8e53f6899d5b755ec03
SSDEEP 768:rvw9816vhKQLroOo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oOoFM7PQcpMgDaLfnyS1loLDL
TLSH
T17F836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_f0b1cc0355ba3de6bafc83fb86542dfe_elex_remcos_wannacry

SHA256 0e917f0681ed8a321bd303814711ffa1d23a5143a3fd7f3ab31cb048851918e2
MD5 f0b1cc0355ba3de6bafc83fb86542dfe
SHA1 1980177775c91fcbd0df47f4bd171401cbaa141b
SHA512 424685f54d88638c4875beb58084bed08abfc5b66102bd0cbea18e015d21dc24c7280a5f42a233320aa99eeadae9f1252353cdf9f38ba8e53f6899d5b755ec03
SSDEEP 768:rvw9816vhKQLroOo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oOoFM7PQcpMgDaLfnyS1loLDL
TLSH
T17F836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths