General

  • Target

    2552-20-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    34d5567e61cb105f227e0236474f5da4

  • SHA1

    d48a32cccb0c6f45aa2e85fea2e0e6cbd856bfe1

  • SHA256

    723ea8ccf9968fca22399e47c9328cc69b9eb0ab2924bef224acfc424256e0b2

  • SHA512

    e4ff6103af1e58b7952c0581ac28a33604cfae12d12ff5680345258beaf2fca3d8a65f7760de09ce8aa2da2ebcb3d5b5b131fd326505aa5b1ee09598f68b795b

  • SSDEEP

    6144:y/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec:y/uPq3AfK496Gw0lwGXN3pvs/Zu

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2552-20-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections