General

  • Target

    1960-2-0x0000000000DE0000-0x00000000012C3000-memory.dmp

  • Size

    4.9MB

  • MD5

    838b03879cc6e89506c35816b7bf9519

  • SHA1

    f502a1590c08e4891a23c28d5ae3090f39e1ae6f

  • SHA256

    6ccbca00c2b72f46051db8ef79691376aa7f97e6d6be33a207ebd0bd70c50942

  • SHA512

    6cbebe94f616f858e4697b67b1c809c5457bdd0187bf9af6821f9aea1ec3100d13f5ea953744bca4cd2bf59295993f4cf3ebb69707e36ed8853a19c547f39984

  • SSDEEP

    49152:IdDww710mLTZceTDvIovHIVuTKTPLwoC9Dfzlt3TSlkTsP:IdDwqFLT/lvoVumbLwoCbtDUA

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1960-2-0x0000000000DE0000-0x00000000012C3000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections