2026-10-22_1004e967efe873b1a1f4381763d10f3b_elex_remcos_wannacry

General

Target
2026-10-22_1004e967efe873b1a1f4381763d10f3b_elex_remcos_wannacry
Size 84KB
Sample261024-1glvrset2q
SHA256 c9f946098f6aa72fdb387a1d8dddca8ceaee7facef70f5c6167931e8c91a6c27
MD5 1004e967efe873b1a1f4381763d10f3b
SHA1 5df50451efa5986ee5bea5b3726671b45fcb46b8
SHA512 8e2d0c75d746ace49f37204db8773e8abf45f5c7db4f552ad774cac2af6b71b6968848559017a8b62a2920c1cb5afe09acb42dd459610fb8873fba067d28a4da
SSDEEP 768:rvw9816vhKQLroMGR4/QQlm2iaQcpFTXNvgDao4QTTyS1tl7lfqvocqcdwV9:7EGh0oMGRF9zaQcpLgDaoNnyS1loLwL
TLSH
T157835C03A684B9F2EB6C0135B15F0F7E563786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_1004e967efe873b1a1f4381763d10f3b_elex_remcos_wannacry

SHA256 c9f946098f6aa72fdb387a1d8dddca8ceaee7facef70f5c6167931e8c91a6c27
MD5 1004e967efe873b1a1f4381763d10f3b
SHA1 5df50451efa5986ee5bea5b3726671b45fcb46b8
SHA512 8e2d0c75d746ace49f37204db8773e8abf45f5c7db4f552ad774cac2af6b71b6968848559017a8b62a2920c1cb5afe09acb42dd459610fb8873fba067d28a4da
SSDEEP 768:rvw9816vhKQLroMGR4/QQlm2iaQcpFTXNvgDao4QTTyS1tl7lfqvocqcdwV9:7EGh0oMGRF9zaQcpLgDaoNnyS1loLwL
TLSH
T157835C03A684B9F2EB6C0135B15F0F7E563786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths