2026-08-19_bcc5f2c75d638f183c5dde7f1e184eee_elex_remcos_wannacry

General

Target
2026-08-19_bcc5f2c75d638f183c5dde7f1e184eee_elex_remcos_wannacry
Size 76KB
Sample260819-e6am5syvay
SHA256 c4012b8701ecb9d8b47f09daa2c8a32c9d3d449d9b92da6686fc5c8dd3209664
MD5 bcc5f2c75d638f183c5dde7f1e184eee
SHA1 0eacf662d5543a0a69667a6344915c7a17181a8b
SHA512 55d7c67aa8e9828581cf4b48c042d16ce3cde73a0c6deb61e346e2fb825eebc65a6d69bb00a6b16d63e65f116537321e22d5667cbd1ae45993271f434abf9b16
SSDEEP 768:vvw9816vhKQLroK/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0oK/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T183735C03A584B5F2EBAC0135B19F0FBE963786B1C4C9282F5B634DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_bcc5f2c75d638f183c5dde7f1e184eee_elex_remcos_wannacry

SHA256 c4012b8701ecb9d8b47f09daa2c8a32c9d3d449d9b92da6686fc5c8dd3209664
MD5 bcc5f2c75d638f183c5dde7f1e184eee
SHA1 0eacf662d5543a0a69667a6344915c7a17181a8b
SHA512 55d7c67aa8e9828581cf4b48c042d16ce3cde73a0c6deb61e346e2fb825eebc65a6d69bb00a6b16d63e65f116537321e22d5667cbd1ae45993271f434abf9b16
SSDEEP 768:vvw9816vhKQLroK/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0oK/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T183735C03A584B5F2EBAC0135B19F0FBE963786B1C4C9282F5B634DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths