2026-08-25_92b25c9490e589d2540682731a4be688_elex_remcos_wannacry

General

Target
2026-08-25_92b25c9490e589d2540682731a4be688_elex_remcos_wannacry
Size 84KB
Sample260826-vtedkaed99
SHA256 5dc61d6b435eceb148918c6b7d459b329990f5b60eb61026c2ac1f883ae686ea
MD5 92b25c9490e589d2540682731a4be688
SHA1 6310c2aee0e8a1834d4304736fe8c049daee43cb
SHA512 eaafe62b6f75ab523d7ac2af9bba84ad74001679b7e5c8cb4adaabf67ac3ac7b821d5bb0436559207fb50de221628be53ad6e67887eb57650ab4f7f8857bbfb5
SSDEEP 768:rvw9816vhKQLroso4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0osoFM7PQcpMgDaLfnyS1loLDL
TLSH
T164836C03A684B5F2EB6C0135B19F0F7E963786B1D0C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_92b25c9490e589d2540682731a4be688_elex_remcos_wannacry

SHA256 5dc61d6b435eceb148918c6b7d459b329990f5b60eb61026c2ac1f883ae686ea
MD5 92b25c9490e589d2540682731a4be688
SHA1 6310c2aee0e8a1834d4304736fe8c049daee43cb
SHA512 eaafe62b6f75ab523d7ac2af9bba84ad74001679b7e5c8cb4adaabf67ac3ac7b821d5bb0436559207fb50de221628be53ad6e67887eb57650ab4f7f8857bbfb5
SSDEEP 768:rvw9816vhKQLroso4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0osoFM7PQcpMgDaLfnyS1loLDL
TLSH
T164836C03A684B5F2EB6C0135B19F0F7E963786B1D0C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths