Overview

overview

10

Static

static

10

3056-13-0x...ry.exe

windows7-x64

3056-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3056-13-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    fea9cd0e8d36231e5e549b9a3bab0487

  • SHA1

    dcd09f0ebecedc3ff72289049d06d9b089aa0874

  • SHA256

    4bd216a9436aec0464036a45e07f87657e83af2867076b81c9c8f99db764d6e2

  • SHA512

    84b4441e6f1a22ed98b1a17a902779b93412f4d2ccfbb1405aba509e4f918569fda31c2c9f358bd612844509b69f3016e57c2d2fdae1775b457dc96c27efff8f

  • SSDEEP

    6144:yXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4c:yX7tPMK8ctGe4Dzl4h2QnuPs/Zs

Score
10/10
remcos

Malware Config

Signatures

  • Remcos family
    remcos
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3056-13-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections