General

  • Target

    1272-192-0x00000000105A0000-0x0000000010624000-memory.dmp

  • Size

    528KB

  • MD5

    c30816c6f6c4c4be4d9fe3e7da0145b3

  • SHA1

    7e9e6c74d26f4a7461ba570eb48074ec7281c2c1

  • SHA256

    ac94490885253a172cf43fc6b087efb4a34e37222f2c402c59954cb686901d7e

  • SHA512

    0f8af2582cda4a47d2a704e5ed9defce41c242fddffae2a9f08a152568d47242aa1ee423cd09b1fe195a7696dc2b0ad3f0d9a8f433f219108307a778598b389b

  • SSDEEP

    12288:VRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2BDU:Vx7cyF2eSsewS8W47eZO

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1272-192-0x00000000105A0000-0x0000000010624000-memory.dmp
    .exe windows x86


    Headers

    Sections