Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240220-en -
resource tags
-
submitted
21/02/2024, 03:58
General
-
Target
b9901f6daa8d87155e5f7ce9d36639183cdd977853d70d796d72e3505852fdfc.exe
-
Size
6.6MB
-
MD5
b1a098476dd2f216c9c08d09e7dcf6f0
-
SHA1
873a36b744a23e4ffaffc21c927bfb348fb690c1
-
SHA256
b9901f6daa8d87155e5f7ce9d36639183cdd977853d70d796d72e3505852fdfc
-
SHA512
b10e16f4a3dbd6aba4b130acb7e97dcfe2bc285888ebdd43cd2b5d50955078a2d6c6ccfc535c9fb7ac43efb9e55baa3d302118ff4eeef1fc7b76bb7bf617f86e
-
SSDEEP
196608:V5x6JkQL119ASGbcM/4HIBc/vFxjpwyyu9EM32Ar:8LS/jBc9Vr
Score
10/10
Malware Config
Extracted
Family
risepro
C2
193.233.132.55:50500
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9901f6daa8d87155e5f7ce9d36639183cdd977853d70d796d72e3505852fdfc.exe"C:\Users\Admin\AppData\Local\Temp\b9901f6daa8d87155e5f7ce9d36639183cdd977853d70d796d72e3505852fdfc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
11.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
11.2MB
-
Filesize
11.2MB