2026-10-21_65f55269058a58649c7d3d0f8bd7f9a4_elex_upatre_wannacry

General

Target
2026-10-21_65f55269058a58649c7d3d0f8bd7f9a4_elex_upatre_wannacry
Size 53KB
Sample261022-3fe2yabg52
SHA256 74b83a7dd1a3ec6a5ffa105cacb96a7623c310b904ec97453514a24cecd12e90
MD5 65f55269058a58649c7d3d0f8bd7f9a4
SHA1 af5f81cb13552c8cdf218951487de3cd3bf71d37
SHA512 f2734d43538147e40ad011a5330884f40d84b8536926c90301bbf531af153c2cabb1cef87fe4e9e067f960607723dfbd521dd342104745c7d17ffb633fb72c3e
SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9ZD:ekoqzqTNMDSpZ9t
TLSH
T1BD336B386AD51572E37BCEB585F251CEA96DBC2339035C4E40B2F3440AB3BD2ADA191D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_65f55269058a58649c7d3d0f8bd7f9a4_elex_upatre_wannacry

SHA256 74b83a7dd1a3ec6a5ffa105cacb96a7623c310b904ec97453514a24cecd12e90
MD5 65f55269058a58649c7d3d0f8bd7f9a4
SHA1 af5f81cb13552c8cdf218951487de3cd3bf71d37
SHA512 f2734d43538147e40ad011a5330884f40d84b8536926c90301bbf531af153c2cabb1cef87fe4e9e067f960607723dfbd521dd342104745c7d17ffb633fb72c3e
SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9ZD:ekoqzqTNMDSpZ9t
TLSH
T1BD336B386AD51572E37BCEB585F251CEA96DBC2339035C4E40B2F3440AB3BD2ADA191D
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

7856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths