General

  • Target

    1936-7-0x00000000010A0000-0x000000000162E000-memory.dmp

  • Size

    5.6MB

  • MD5

    254edf6209dc6b85992088a05e4eb1ca

  • SHA1

    933e3cb52d3c0b3d64dde8916e866e35acaf4eb6

  • SHA256

    6095cd540f310ecdea4fffc4bd900201391276d6f1fe5c20a6b11741c2351014

  • SHA512

    38bcb24986fc713f227de83359f7e9584f7975ef13d09dd220332ed50b2bff7b502daa10b8aaddcad3bed2f7b75d5e3898615f5f8e736ccfa230d6643ea7dd83

  • SSDEEP

    98304:MhhaahpWmQOMcg3Hpr27W/Xecl8uR/kSNgNPCSUbXEMMEyprC1mee7d8:MhJofe6wIyVC1mr8

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1936-7-0x00000000010A0000-0x000000000162E000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections