2026-10-21_9af0218108a7ce659049e05e46356d7e_elex_remcos_wannacry

General

Target
2026-10-21_9af0218108a7ce659049e05e46356d7e_elex_remcos_wannacry
Size 84KB
Sample261022-te4jgaaf96
SHA256 22fd478d080822935422cfdf23852d425f10c00af3ae44ce38674070f7ebd511
MD5 9af0218108a7ce659049e05e46356d7e
SHA1 a0fbe447fe5ceaaeba64a48935d8d88a81fd6daf
SHA512 288992a005f2dc70ffe2a882b8791670c26a3d92cb91bf09d80b69119370f49d9108c62ccae0a99f16809d559bbff0b43695cf3797f5922512c6c89da5c0d977
SSDEEP 768:rvw9816vhKQLroaGR4/QQlm2iaQcpFTXNvgDao4QTTyS1tl7lfqvocqcdwV9:7EGh0oaGRF9zaQcpLgDaoNnyS1loLwL
TLSH
T1E1835C03A684B9F2EB6C0135B19F0FBE563786B1C0C9682F5B638DB55862863F431E13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_9af0218108a7ce659049e05e46356d7e_elex_remcos_wannacry

SHA256 22fd478d080822935422cfdf23852d425f10c00af3ae44ce38674070f7ebd511
MD5 9af0218108a7ce659049e05e46356d7e
SHA1 a0fbe447fe5ceaaeba64a48935d8d88a81fd6daf
SHA512 288992a005f2dc70ffe2a882b8791670c26a3d92cb91bf09d80b69119370f49d9108c62ccae0a99f16809d559bbff0b43695cf3797f5922512c6c89da5c0d977
SSDEEP 768:rvw9816vhKQLroaGR4/QQlm2iaQcpFTXNvgDao4QTTyS1tl7lfqvocqcdwV9:7EGh0oaGRF9zaQcpLgDaoNnyS1loLwL
TLSH
T1E1835C03A684B9F2EB6C0135B19F0FBE563786B1C0C9682F5B638DB55862863F431E13
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths