General

  • Target

    4892-199-0x0000000002790000-0x0000000002814000-memory.dmp

  • Size

    528KB

  • MD5

    fcf25bb08d3e09576bf35e94a89a99ad

  • SHA1

    c10c49ac67349177f06d1437af6bc4bf184aca82

  • SHA256

    0351098dbdf53dc8df5f91b19d094b546b989dab7170db4514e09f12d9192b6d

  • SHA512

    05cad2e5938534baebac32cad0da7bd7db3bde6009e732f254807ff716b6f22a25906a569eaba01eb86cd1db78417dfe2c8245a8fff9ba8fe6e409a984f36fcb

  • SSDEEP

    12288:LjdAK8wxqkXuxOqLXO3X2orpbKs/ZgNBRq:dA3wxqkXuxOq+rpbRZ6

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4892-199-0x0000000002790000-0x0000000002814000-memory.dmp
    .exe windows x86


    Headers

    Sections