General

  • Target

    1712-2-0x0000000001120000-0x0000000001603000-memory.dmp

  • Size

    4.9MB

  • MD5

    17a3ef7a84028a870d4b4c5645e0a02e

  • SHA1

    8c67137ee96dd4063acbf8eaa8718f0be1139308

  • SHA256

    a833ce5cdbe8dda8b5857d81b4031db579bfbc4dec2f4e0fa0451df4ad8d0651

  • SHA512

    2fe99cdbc1e6fe55053060b7416a66efec770bc86eb49e648eea21a85e312d030b38b737db39f820f603f454490cc1d7fabb4b35ea29bc7f740588876c932084

  • SSDEEP

    49152:juWpCaWKjin4URdTQgf4zJaOHorOFFFFVF1V8lYlll1FoV1Fl1qc+Fa1lZadsLC4:juWpCo+n4Cf4zJaHrz+WZato1

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1712-2-0x0000000001120000-0x0000000001603000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections