General

  • Target

    2944-1-0x0000000001060000-0x0000000001406000-memory.dmp

  • Size

    3.6MB

  • MD5

    a1efe28151d9de4aed1d4aa5c4b29299

  • SHA1

    1d134797ecec5dcd86b4e34ba16ab6464d34a525

  • SHA256

    388c50d87477456591844e43658d63ba1be845f1b9d5c4c0a759142e85984f4d

  • SHA512

    38b57466e4cc5d61d17ce9c55ba64f2e51659f701fc3d7c56499827ebb3b47a18870e2ad39636cd8edb247bebd6c7db267064336ef2ab00577f7e1f86a6385b1

  • SSDEEP

    49152:wZCf8kgeLAWkHyGsUSTRTDc52v0lnbqDMZ0Zbn9xJf:wZCf8kDcWkWUCDc52v0lnbqDvZj9xJ

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2944-1-0x0000000001060000-0x0000000001406000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections