General
- Target 2026-08-16_a6531d160ab5318122f6ba527ae171a8_elex_remcos_wannacry
- Size 59KB
- Sample260816-3eq3tage32
- SHA256 e4b929d7dd4cf010713667adbbdf3d3439664fc28cee2d3be4e52addf7e3e70e
- MD5 a6531d160ab5318122f6ba527ae171a8
- SHA1 e00aa6ba949f522549d8fcb779e21e60b8f461b6
- SHA512 51b88309c3f0f5c1ca201e411ad573b343c6bb3a7247dcaa8138176a7ea20795aaa608784701e3b756a32b147553ce83c0da94582f0c3134f0018046bb7d2c3b
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroK04/CFsrYAutg/CNl2e4WMZ:Mvw9816vhKQLrod4/wQLfwl27WMZ
- TLSH T1EB439E831F997CF2F3860075097F87B6836B54C4D24EBE9B6F90CC0D4466641E83E609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_a6531d160ab5318122f6ba527ae171a8_elex_remcos_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_a6531d160ab5318122f6ba527ae171a8_elex_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a6531d160ab5318122f6ba527ae171a8_elex_remcos_wannacry
- Size 59KB
- SHA256 e4b929d7dd4cf010713667adbbdf3d3439664fc28cee2d3be4e52addf7e3e70e
- MD5 a6531d160ab5318122f6ba527ae171a8
- SHA1 e00aa6ba949f522549d8fcb779e21e60b8f461b6
- SHA512 51b88309c3f0f5c1ca201e411ad573b343c6bb3a7247dcaa8138176a7ea20795aaa608784701e3b756a32b147553ce83c0da94582f0c3134f0018046bb7d2c3b
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroK04/CFsrYAutg/CNl2e4WMZ:Mvw9816vhKQLrod4/wQLfwl27WMZ
- TLSH T1EB439E831F997CF2F3860075097F87B6836B54C4D24EBE9B6F90CC0D4466641E83E609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE