General
-
Target
45dd7bdcb82d8dd467a26f1e50f74c8421a5d19dd949c78b4484c5f954fa4734
-
Size
1.6MB
-
Sample
231213-299yqsbef5
-
MD5
1176a31766b5de387414af0a494b0a8b
-
SHA1
b2385e9c44ff8f49bd705e77cfb290f7a074154c
-
SHA256
45dd7bdcb82d8dd467a26f1e50f74c8421a5d19dd949c78b4484c5f954fa4734
-
SHA512
cf2268a909edce26b54dd755ed8171675cd818554e888daedab61af21b7fa5ac822dfba0e025919e02b2434483703b9ecb01402aaeac9cc7e7ec5a8f22622881
-
SSDEEP
49152:80ceOGgUYYEmluRKYoFh4kGWusbQnIyDi1E1uonTKi/OjCCNG:1XOGgUYC4RKXFhrusbaDkE1u
Behavioral task
behavioral1
Sample
45dd7bdcb82d8dd467a26f1e50f74c8421a5d19dd949c78b4484c5f954fa4734.exe
Resource
win10v2004-20231130-en
Malware Config
Extracted
risepro
193.233.132.51
Targets
-
-
Target
45dd7bdcb82d8dd467a26f1e50f74c8421a5d19dd949c78b4484c5f954fa4734
-
Size
1.6MB
-
MD5
1176a31766b5de387414af0a494b0a8b
-
SHA1
b2385e9c44ff8f49bd705e77cfb290f7a074154c
-
SHA256
45dd7bdcb82d8dd467a26f1e50f74c8421a5d19dd949c78b4484c5f954fa4734
-
SHA512
cf2268a909edce26b54dd755ed8171675cd818554e888daedab61af21b7fa5ac822dfba0e025919e02b2434483703b9ecb01402aaeac9cc7e7ec5a8f22622881
-
SSDEEP
49152:80ceOGgUYYEmluRKYoFh4kGWusbQnIyDi1E1uonTKi/OjCCNG:1XOGgUYC4RKXFhrusbaDkE1u
Score7/10-
Drops startup file
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-