Overview

overview

10

Static

static

10

896-1511-0...ry.exe

windows7-x64

10

896-1511-0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    93s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/01/2024, 23:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    896-1511-0x00000000012A0000-0x00000000017BE000-memory.exe

  • Size

    5.1MB

  • MD5

    0d2c63d922432f3b641f9705ccc37fd6

  • SHA1

    f306d3061fa148b52d8355ff6a021d590fe89400

  • SHA256

    918bd727e513a790cd7264b00a2fe81255cdd57e7ab4f7312319d8200734d2d5

  • SHA512

    232a138b53fdfd22b26f34aa2cbe6a45b2afeacfa4ac6ba3c9d15714a6b021eb7d6cd96922b5f64e02f2de7c87bacd066d45c9f615b4853e8f3bbadb692fd3b7

  • SSDEEP

    49152:NE7V9Rr3M5FeWTZKB1CohtQTiuHtvs1YfG9srrBJZTKIi3KBlJ33eRZHGpdLlbOh:u7bRo5Fd1m1CGtzs3DUIRsxsOMjkx

Score
10/10
riseprostealer

Malware Config

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\896-1511-0x00000000012A0000-0x00000000017BE000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\896-1511-0x00000000012A0000-0x00000000017BE000-memory.exe"
    1⤵
      PID:1164
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1164 -s 216
        2⤵
        • Program crash
        PID:3076
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1164 -ip 1164
      1⤵
        PID:3584

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1164-0-0x00000000012A0000-0x00000000017BE000-memory.dmp

        Filesize

        5.1MB

        Download