General

  • Target

    2820-19-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    52511b2774954b36f085e6c7c07111e9

  • SHA1

    3c422b7988a96f637918a08ac36199ac20821837

  • SHA256

    c7a422c37945d076dd1278f2af154c6193e14e9280973bc7480f634e04a533ef

  • SHA512

    6abd418f2277e8efa27ed2f53d12c49ed45534d057fa0f0ec66ea894f1d2f9e90d3ec55eab4f11156040b2de726b6f3abd46fb1668059546c87112443e2f46d8

  • SSDEEP

    6144:i/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7:i/uPq3AfK496Gw0lwGXN3pvs/Zu

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2820-19-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections