General

  • Target

    2356-0-0x0000000000E50000-0x0000000001AD7000-memory.dmp

  • Size

    12.5MB

  • MD5

    c7124621fb42e8deb8dfc4fea959c408

  • SHA1

    e22d24bf5cf742783a241b62a36c0bcb1ac7183e

  • SHA256

    6740fb5c054dfa58ae64f238c8f2a37a29bbaed04be0e287a4c4f96102abb6bf

  • SHA512

    ae281974887159a20b939f66a8ed8a5bbb08b04f2480145e84900d555a071013bb164649a73ff0e761d3f6a287a7a35547ab8452fdbfe84a189634f591cef238

  • SSDEEP

    196608:PImEh6siFLHOU/mguYIFnzB9fFSpTRtx6cla1SUgfGGDN72D4BcuA1OcsNP1sPBG:PM6wnwRJxUenZ9cFdsNP1sZVhba

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.89:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2356-0-0x0000000000E50000-0x0000000001AD7000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections