Analysis
-
max time kernel
295s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 00:06
General
-
Target
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e.exe
-
Size
2.9MB
-
MD5
5b92aa48fb7433eadf1528b1ac6fb093
-
SHA1
047a567fba56298ca7f19285cced7cbe2d9df390
-
SHA256
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e
-
SHA512
3cefba8115a85c70555931b7592c9272a5fb23c705fffb53a721863c44eeb7a7d84e210431aca00b1721cce617679a4f3b3075895b60f9c350cb100f75add44c
-
SSDEEP
49152:3p3U8Kxze/K5nEir+XGcetRLVzAPx2n4gvnnLgx+zl8IANTph8AvsN5XXISq3W5l:3psRqotp2qnnsxoCIANTpaAvsvXI73Wj
Malware Config
Extracted
risepro
193.233.132.62
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 31 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e.exe"C:\Users\Admin\AppData\Local\Temp\fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.1MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
3.8MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB
-
Filesize
11.1MB