General

  • Target

    1932-19-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • MD5

    d19d6d28c0afcc89836c1524b1b5c99e

  • SHA1

    0191c80da6cdbf11f955c0f4ee3d931462359334

  • SHA256

    196269fe9f4def4e777e08d9954617fdc4d60bb92c9a3f3cef1e45fbfafc142f

  • SHA512

    a7c89414d05c1f2bf05bbdcbd967e7c43322dd9d25d2b967eff9a1ac203ae3d6b32cb6b3ec1a01c8878664eb3892646afb2e2dc2efb16b8b37f293a94535ccea

  • SSDEEP

    6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4c:8X7tPMK8ctGe4Dzl4h2QnuPs/Zs

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1932-19-0x0000000000400000-0x0000000000482000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections