2026-08-25_90742b706c6cc2925d2cc04b2bb1e4ce_elex_remcos_wannacry

General

Target
2026-08-25_90742b706c6cc2925d2cc04b2bb1e4ce_elex_remcos_wannacry
Size 84KB
Sample260826-v35bcatbpb
SHA256 e25226e6b5ded6cdf588c7a1a345cd83cc1228c6e91dd1969ad3da340ad3988a
MD5 90742b706c6cc2925d2cc04b2bb1e4ce
SHA1 9a9a01170437bfdfd02aee179fedbff370c65eb7
SHA512 4c095844dda1b91b16cbf93d42c045fce9f267a20ae250a92eb7bf24e15e8db344b1e929bc006ea25026fa605952865c8d67c09c1db1612235a58a647b4dfb16
SSDEEP 768:rvw9816vhKQLrowo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0owoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1E5836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_90742b706c6cc2925d2cc04b2bb1e4ce_elex_remcos_wannacry

SHA256 e25226e6b5ded6cdf588c7a1a345cd83cc1228c6e91dd1969ad3da340ad3988a
MD5 90742b706c6cc2925d2cc04b2bb1e4ce
SHA1 9a9a01170437bfdfd02aee179fedbff370c65eb7
SHA512 4c095844dda1b91b16cbf93d42c045fce9f267a20ae250a92eb7bf24e15e8db344b1e929bc006ea25026fa605952865c8d67c09c1db1612235a58a647b4dfb16
SSDEEP 768:rvw9816vhKQLrowo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0owoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1E5836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths