2026-08-16_093aa4ab363fc0c1ab42594615a99cd2_elex_remcos_wannacry

General

Target
2026-08-16_093aa4ab363fc0c1ab42594615a99cd2_elex_remcos_wannacry
Size 76KB
Sample260816-svmefsec43
SHA256 8587cd4f86bdfa1f51b732b01c66d7b4685677499b862273aa3b0e3b9031b17d
MD5 093aa4ab363fc0c1ab42594615a99cd2
SHA1 b3820a1d0ef82a3dfb7a2580f0ac66504ce1f726
SHA512 b0ca550011c4d3067b7e8bd4d2962f08a81f503811957c54f4d314b2f5170fb97d3088f958fa3072b139333070ba32981d360e81dd41432a631e6b63e0b8680c
SSDEEP 768:vvw9816vhKQLron/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0on/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T1B9736C03A584B5F2EBAC0135B19F0FBE563B86B1C4C9282F5B634DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_093aa4ab363fc0c1ab42594615a99cd2_elex_remcos_wannacry

SHA256 8587cd4f86bdfa1f51b732b01c66d7b4685677499b862273aa3b0e3b9031b17d
MD5 093aa4ab363fc0c1ab42594615a99cd2
SHA1 b3820a1d0ef82a3dfb7a2580f0ac66504ce1f726
SHA512 b0ca550011c4d3067b7e8bd4d2962f08a81f503811957c54f4d314b2f5170fb97d3088f958fa3072b139333070ba32981d360e81dd41432a631e6b63e0b8680c
SSDEEP 768:vvw9816vhKQLron/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0on/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T1B9736C03A584B5F2EBAC0135B19F0FBE563B86B1C4C9282F5B634DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths