Overview

overview

10

Static

static

10

2664-22-0x...ry.exe

windows7-x64

2664-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2664-22-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    e40c95f4daf475c7173a9b0d1441e69d

  • SHA1

    7555719441a6c47128c6e02c99ae78a04c9863cd

  • SHA256

    122bcacbcae0bd7d5a38e111710b0f918fa902466d44cac720b65188399f2859

  • SHA512

    92c280c3097ba5787fad4914d0062c33fbc31605417129b8aee7b29a27a9b6ebd72440ea9b140db7167dcbf952fb59f2fc9502dbb0198863c9d535c1729ce226

  • SSDEEP

    6144:y/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7:y/uPq3AfK496Gw0lwGXN3pvs/Zu

Score
10/10
remcos

Malware Config

Signatures

  • Remcos family
    remcos
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2664-22-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections