2026-10-16_e89d2fbba52cc435d32fb45800605849_elex_remcos_wannacry

General

Target
2026-10-16_e89d2fbba52cc435d32fb45800605849_elex_remcos_wannacry
Size 84KB
Sample261017-el5msahs5k
SHA256 d89141e2f80086661d801bba7e8bed3520599fc1152082a9765e26b86664a006
MD5 e89d2fbba52cc435d32fb45800605849
SHA1 e8d9e780c20c9c8c6b17f90f03a10aef0eaf3fb4
SHA512 d4269c9e1c6c500a586623418494f31de1e384c77ce65b94453144248926d2c0d11987b5b56937b6528fa4be30f66809137edb561ac68ca461e31a5b0a9a2a2a
SSDEEP 768:rvw9816vhKQLroCo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oCoFM7PQcpMgDaLfnyS1loLDL
TLSH
T12F836C03A684B5F2EB6C0135B19F0F7E963B86B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_e89d2fbba52cc435d32fb45800605849_elex_remcos_wannacry

SHA256 d89141e2f80086661d801bba7e8bed3520599fc1152082a9765e26b86664a006
MD5 e89d2fbba52cc435d32fb45800605849
SHA1 e8d9e780c20c9c8c6b17f90f03a10aef0eaf3fb4
SHA512 d4269c9e1c6c500a586623418494f31de1e384c77ce65b94453144248926d2c0d11987b5b56937b6528fa4be30f66809137edb561ac68ca461e31a5b0a9a2a2a
SSDEEP 768:rvw9816vhKQLroCo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oCoFM7PQcpMgDaLfnyS1loLDL
TLSH
T12F836C03A684B5F2EB6C0135B19F0F7E963B86B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths