General

  • Target

    2672-19-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    6121e8282587424583d2566672ee117a

  • SHA1

    8556a1662afc4ed481c86519b86a660372f8c07c

  • SHA256

    755825c85d821564cf513206b61c01f7b77b344946c286c9074028ea73cf0742

  • SHA512

    311eb568566bb24d68d28caec70f02cc2746bc86fd7af904850589ad7cf868a053568b60f504668025389438fd1d4f58b6b56c4a98c7f379b01b3cefc9585d5b

  • SSDEEP

    6144:y/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec:y/uPq3AfK496Gw0lwGXN3pvs/Zu

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2672-19-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections