General

  • Target

    2080-2-0x00000000000E0000-0x00000000005C3000-memory.dmp

  • Size

    4.9MB

  • MD5

    6f3a3b4653e194c6c2eb27841e149ebb

  • SHA1

    2583749e592f9438cc1df5b1978395480cb81603

  • SHA256

    16d54a0b625b5b94c97efecf5598fcaad78864aa71a48e96899828d0bd839cce

  • SHA512

    087fbdb9fc6291d63ca66f3fbc2b3434d41cc9b5f3c79968f5c972a5412424d4fac8d3a44a0eb6f403d755cca4dfdb5a256a8e33dd8f7f58b54a8d118c8b1301

  • SSDEEP

    49152:fNTAAHrlEmLjpMZTYfOjuMy5N3OpvkBtAqlYR2/SmAe:fNTAaVLjtOjuMy55OpvkFYgvAe

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2080-2-0x00000000000E0000-0x00000000005C3000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections