Overview

overview

10

Static

static

10

1772-68-0x...ry.exe

windows7-x64

1772-68-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1772-68-0x0000000000400000-0x0000000000480000-memory.dmp

  • Size

    512KB

  • MD5

    16248a45f34b50995e14f2fe91ec2c9a

  • SHA1

    42d49095b6e64653623e912027bbe55924f6299e

  • SHA256

    fa92ae07b8eff32fa3dc81ac4bd55d33adc9ed8e5f9bdc7ff880fc196d9f7637

  • SHA512

    c3ecd76e357c72b994c889d64d80d6b8c6a8e353556a68d3fc8d8794217319df608e812cea4e4d226f2c803da2a5676f8d216e96cfbc585e1e8314d021ee3210

  • SSDEEP

    6144:pjH9dY1fKmXbwxqbQWmudPOqwiXO3X2yjKCrp/5ttAAMS6NYUsAOZZgQXTc:pjdAK8wxqkXuxOqLXO3X2orpbKs/Zg

Score
10/10
remcos

Malware Config

Signatures

  • Remcos family
    remcos
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1772-68-0x0000000000400000-0x0000000000480000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections