General

  • Target

    1476-71-0x0000000004420000-0x0000000005420000-memory.dmp

  • Size

    16.0MB

  • MD5

    c5efc700a8cf6b8099f5b8cab059191a

  • SHA1

    bc2d3193d36b4bdab58054eb947b56fefe45f8d0

  • SHA256

    c9228d1f5143a7b376f1922114e4cdebd8980687f14f3d0a49605f1ebe13aaf7

  • SHA512

    c7e436add1079b823ea8302182345d6589c37b7af42e3b81677c756696e3c5fe073797777d0897c8fb8e9ef7a354b09d8e0c7bb899245bc5fb2e1d25e3909a3a

  • SSDEEP

    6144:qXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNd5Gv:qX7tPMK8ctGe4Dzl4h2QnuPs/Zsscv

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1476-71-0x0000000004420000-0x0000000005420000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections