Extracted

• • Target

    file.exe

  • Size

    3.0MB

  • MD5

    4a62a863daffe988e9a1fe126234dbbd

  • SHA1

    6e9c2ca97366ce733e4f88ccb4e6d6411efaa208

  • SHA256

    531b98c17443cbcf4e821e91f5b84cae088f30f7c1157c63bcf7f90f105e6c85

  • SHA512

    62887e4ca8b50825084bbcf1e8fd1da032a8794cca432965194b5020e7679bb4a902953e0173964a4da04fad2183a7d7e0af7d64d4411c1567e69087ba1af70d

  • SSDEEP

    49152:hN94VVApj6nT2eMYmM4i6haea0GNG7f+Mj1zP/zEv8m7kRDxP/SpMTCnzK8ZTXfi:JUaj6CD0maxzNGPjhzEloxbMZ7re

  Score

  10^/10

  privateloaderriseprocollectiondiscoveryevasionloaderpersistencespywarestealerthemidatrojan

  • PrivateLoader

    PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    loaderprivateloader

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Drops startup file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2