General

  • Target

    2072-10-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    cd94b6c2d7589faa3a9d9534cb471cc5

  • SHA1

    a4f83b85ac379e58268bf0738e67971ab0779deb

  • SHA256

    68bdc99e946cbd6623ef0277614a7a1a39dbd3402b6fd9583b334f96de256bbd

  • SHA512

    14f5eef16824914d00a2e3abb445d1f07123dfd6e1b99b48a5723986ec99ccc69f4fcfc21900868507c6cdcac6f1ad6ea9efb3f8d6eac0743c38e9463a868bb9

  • SSDEEP

    6144:I/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec:I/uPq3AfK496Gw0lwGXN3pvs/Zu

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2072-10-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections