General

  • Target

    4364-153-0x00000000105A0000-0x0000000010624000-memory.dmp

  • Size

    528KB

  • MD5

    ec904dfb624a28cca68afd6c470d5c36

  • SHA1

    37bd349eab6ea108b574a0392b636c0459d1228c

  • SHA256

    9dd3c901908a8232008a55e3fbf2ed34ad2b98bf6fd8e8c90e851801ce5ba61a

  • SHA512

    04dc9ce4e4c6095f6c931a4d6257464645768e469bedb6f4409d276a2ee915670401eb90f0fc4cb7d8c9d01f62d9caa6e0eaea9fe01e27f3fe53f56922e5a74c

  • SSDEEP

    6144:z1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcN5I2OhX:z1EZT90uNQzYgScBvnn/XpTs/Zi2OhX

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4364-153-0x00000000105A0000-0x0000000010624000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections