General

  • Target

    1904-101-0x0000000002F00000-0x0000000003F00000-memory.dmp

  • Size

    16.0MB

  • MD5

    9449f8761799d6140f8a9a3d63c3b31c

  • SHA1

    a649ce6e4e9d621a3d95db1f847825b002b42c3e

  • SHA256

    bc425ff5a0dbbbb7bac0a33e6dba46d26a20c18c2abe93afb930610c2cf61808

  • SHA512

    aeb01c19c5b6db3f54cae26714a05ae91b22ef620a4b65193492535129411d59dbc5f232ef5f119e414cbcdee74ce50460d16d2d05f9472856db5e2a6a0c6656

  • SSDEEP

    6144:x/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7A7ov:x/uPq3AfK496Gw0lwGXN3pvs/ZuN8v

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1904-101-0x0000000002F00000-0x0000000003F00000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections