Resubmissions

08-03-2024 18:58

240308-xmfzxseg8t 10

05-02-2024 10:44

240205-mstsvsgabr 10

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-02-2024 10:44

General

  • Target

    file.exe

  • Size

    5.6MB

  • MD5

    3355e8cdfa1a9dbe0b51468287da4ca2

  • SHA1

    518afba92088cf9228cdef4fb1d4c94c74ef4e5a

  • SHA256

    4e4d4e52ad156dc7b32a4010134ba2b0fb56dea2d47c8bf562e5cc587a165faa

  • SHA512

    cca0040d90031c49d1c3d309989167b6ed05563932d357b85705deddfc77a3e8ff79f4b173ff1ab72dc00e094360704357c7e268b26e24f6465ca3cdb990b6ab

  • SSDEEP

    98304:wIZh0xSrUhq023L2QwR8be0eaQofwXwN9BMRUSPW0TA8zOlLdPj9OIQf1xSAzeBk:nKSAhH9i/x8waPeXBLdb9OnSACBk

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.67:50500

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2180-0-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/2180-2-0x0000000000AD0000-0x00000000014EA000-memory.dmp

    Filesize

    10.1MB

  • memory/2180-3-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/2180-5-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/2180-7-0x0000000077A30000-0x0000000077A31000-memory.dmp

    Filesize

    4KB

  • memory/2180-6-0x00000000000E0000-0x00000000000E1000-memory.dmp

    Filesize

    4KB

  • memory/2180-9-0x00000000000E0000-0x00000000000E1000-memory.dmp

    Filesize

    4KB

  • memory/2180-19-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2180-16-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/2180-14-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/2180-12-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/2180-26-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/2180-24-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/2180-21-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2180-11-0x00000000000E0000-0x00000000000E1000-memory.dmp

    Filesize

    4KB

  • memory/2180-36-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2180-34-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2180-37-0x0000000000AD0000-0x00000000014EA000-memory.dmp

    Filesize

    10.1MB

  • memory/2180-31-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2180-29-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2180-40-0x0000000000AD0000-0x00000000014EA000-memory.dmp

    Filesize

    10.1MB