2026-10-16_9efbfc57473e9555ca2af5e33d4b670c_elex_remcos_wannacry

General

Target
2026-10-16_9efbfc57473e9555ca2af5e33d4b670c_elex_remcos_wannacry
Size 84KB
Sample261017-mtds2a11fv
SHA256 498a59ac62e575052bf8c2ebe24abe7189106662eb7391dcb522203a518e2757
MD5 9efbfc57473e9555ca2af5e33d4b670c
SHA1 01a8f224f7ac9c3a8bbad5e65b6a2100aa30a2f7
SHA512 317db076231e31aa4db7b776ccc2c19a33ca1660a665369280bffcddbc5348294c52fd2c3a78fe68c67ca2f5546c5fdc6a5586f53c5a3a88703fd7d3b5465a06
SSDEEP 768:rvw9816vhKQLrofo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0ofoFM7PQcpMgDaLfnyS1loLDL
TLSH
T12B836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_9efbfc57473e9555ca2af5e33d4b670c_elex_remcos_wannacry

SHA256 498a59ac62e575052bf8c2ebe24abe7189106662eb7391dcb522203a518e2757
MD5 9efbfc57473e9555ca2af5e33d4b670c
SHA1 01a8f224f7ac9c3a8bbad5e65b6a2100aa30a2f7
SHA512 317db076231e31aa4db7b776ccc2c19a33ca1660a665369280bffcddbc5348294c52fd2c3a78fe68c67ca2f5546c5fdc6a5586f53c5a3a88703fd7d3b5465a06
SSDEEP 768:rvw9816vhKQLrofo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0ofoFM7PQcpMgDaLfnyS1loLDL
TLSH
T12B836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB95862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths