2026-10-17_d9219533919b3c53713042cddfb0fd1f_elex_remcos_wannacry
Classification: Malicious
2026-10-17_d9219533919b3c53713042cddfb0fd1f_elex_remcos_wannacry is a trojan. Detected by 64 antivirus engines. Reported by Triage, last seen 2026-10-18.
Detection summary
- 64 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Stormser |
Triage |
2026-10-18 04:29:39 |
2026-10-18 04:29:39 |
malicious-activity
|
|
Tags
stormser
discovery
execution
persistence
worm
Sample information
- Filenames
- 2026-10-17_d9219533919b3c53713042cddfb0fd1f_elex_remcos_wannacry
- SHA-256
b5cdbe2a4a578d3cce33bbf689b7af7f26b9e6f4ab3df278110c7440625a5cf4- First indexed
- 2026-10-18 04:29:39
- Last updated
- 2026-10-18 04:29:39
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.StormAttack.1 |
| APEX | Malicious |
| AVG | Win32:StormDDOS-B [Trj] |
| Acronis | suspicious |
| AhnLab-V3 | Trojan/Win.StormAttack.92820 |
| Antiy-AVL | Trojan[DDoS]/Win32.StormAttack |
| Arcabit | Trojan.StormAttack.1 |
| Avast | Win32:StormDDOS-B [Trj] |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.StormAttack.1 |
| Bkav | W32.Malware.4E9C97C5 |
| CAT-QuickHeal | PUA.StormserRI.S28491914 |
| CTX | exe.trojan.stormattack |
| ClamAV | Win.Malware.Ulise-9951851-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | DDoS.Storm.156 |
| ESET-NOD32 | Win32/TrojanDropper.Agent.PIH trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.StormAttack.1 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/ServStart.AS!tr |
| GData | Win32.Trojan.PSE.11FOXOM |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Dropper.zv!s1 |
| Ikarus | Trojan-Downloader.Win32.Pangu |
| Jiangmin | TrojanDDoS.StormAttack.a |
| K7AntiVirus | DoS-Trojan ( 005d26761 ) |
| K7GW | DoS-Trojan ( 005d26761 ) |
| Kaspersky | Trojan-DDoS.Win32.StormAttack.a |
| Malwarebytes | DDoSTool.Storm |
| MaxSecure | Trojan.DDoS.StormAttack.a |
| McAfeeD | Real Protect-LS!D9219533919B |
| MicroWorld-eScan | Trojan.StormAttack.1 |
| Microsoft | DDoS:Win32/Stormser.A |
| NANO-Antivirus | Trojan.Win32.StormAttack.fnqayj |
| Panda | Trj/Genetic.gen |
| Rising | Dropper.Agent!1.C6A3 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-StormDOS |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Injector.kz |
| Sophos | Troj/Agent-BCBH |
| Symantec | Backdoor.Trojan |
| TACHYON | Trojan/W32.StormAttack.61440 |
| Tencent | Trojan-Ddos.Win32.Stormattack.wa |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericR-KGL!D9219533919B |
| TrendMicro | Trojan.Win32.STORMER.SMTH |
| TrendMicro-HouseCall | Trojan.Win32.STORMER.SMTH |
| VBA32 | TrojanDDoS.StormAttack |
| VIPRE | Trojan.StormAttack.1 |
| Varist | W32/Trojan.VYFZ-2790 |
| ViRobot | Trojan.Win32.Agent.61440.JD |
| VirIT | Trojan.Win32.Storm.GA |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Magania.~AAC@f80ur |
| Yandex | Trojan.GenAsa!WGvR5YnH2mQ |
| Zillya | Tool.StormAttack.Win32.290 |
| ZoneAlarm | Troj/Agent-BCBH |
| alibabacloud | DDoS:Win/Stormser.e9f9c105 |
| huorong | TrojanDropper/Agent.jl |