General

  • Target

    5016-154-0x0000000010590000-0x0000000010670000-memory.dmp

  • Size

    896KB

  • MD5

    3e3ba622f905adc87b59d86797852d8c

  • SHA1

    05be9e3466d28ef6e381b18fd5367f6d6953ec92

  • SHA256

    01502d589fe2d8bd2e2afb0aba0ba9f9bcbf879208d8e791a6acb184bca226d5

  • SHA512

    900a3c2b0c7da0255a30f623cd94211bec8f882c3eb4ceac75a6d4b941201021587e7efc228b16973ec8c968edac14e6aec59fa03f2a70123aee697a9ed2d24f

  • SSDEEP

    12288:xYe6UWhaT5xnDdLv9rX+1jZJqxE/ZjEpDyib:r6UWUT5xDN9IjZJsCZWyg

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5016-154-0x0000000010590000-0x0000000010670000-memory.dmp
    .exe windows x86


    Headers

    Sections