Analysis
-
max time kernel
148s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
28/01/2024, 19:13
General
-
Target
5cbedfc8cb4b91ed6b70b40d4489e9ed.exe
-
Size
1.1MB
-
MD5
5cbedfc8cb4b91ed6b70b40d4489e9ed
-
SHA1
b56421265081dbad0a815533bd1aedfe630f8e7c
-
SHA256
30d0f0e3bc0bb25448c58097cb620fab4bf9bf3831fa1c38420bf3fc777c1e31
-
SHA512
14c9eddd99854291740300cf7f819899f9b32903a69e196be00c1eab4fc448a20f9e86a31428ae6af4cfba8007bc143a805e2a08aaad79926fa0e04712e39d0e
-
SSDEEP
24576:oU9W4FjII16gEZL23Y6ld/zW7epoNr2t7twQuiyIakELXBqLIek9Jhpfn:f9WyIUREU3lld/zW7E+K/lrL8XBqLIJf
Score
10/10
Malware Config
Extracted
Family
risepro
C2
193.233.132.62:50500
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5cbedfc8cb4b91ed6b70b40d4489e9ed.exe"C:\Users\Admin\AppData\Local\Temp\5cbedfc8cb4b91ed6b70b40d4489e9ed.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB