General

  • Target

    3044-2-0x0000000001320000-0x0000000001800000-memory.dmp

  • Size

    4.9MB

  • MD5

    a205ef09d24854406d4d76fb42f36e86

  • SHA1

    d17dd5bd9f740bd27ae54b8dd17dc8877e5ab370

  • SHA256

    d651b692c5ec561e8fc8925ac4872003f57f6cf29c94e99a448a367fd41649f5

  • SHA512

    14d07537bc8afe2bdacb025e1491732cd01a87935395ba8573a37a811f5767177990ceee4b7b485c69a572ef35ea147fab0265503c5529bc6794f8e8b307ae6b

  • SSDEEP

    49152:YO2Jia2qDi3XY0xgTWAK4V15BfEDVRtTrFhElYBaWntq1NwZcQtVj:YO2JioenYnK4VrB8tTrF+YBaWKQrj

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3044-2-0x0000000001320000-0x0000000001800000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections