Extracted

• • Target
    SecuriteInfo.com.Win32.TrojanX-gen.24885.25657.exe
  • Size 3.2MB
  • SHA256 223ca31f57ae2a9b8a4cd1e7eaa6c9b9d5506e8d6ab53e56ec976bf88465a39e
  • MD5 76a40ba1272e483cdebb46af89c083ef
  • SHA1 3206ff7f204e001e194ad988cf08bcb5d4cd31e8
  • SHA512 cc1a5afce501a3b163983577c78786a1e37db1f8959e5d7305bdd9a4237b61244f7919fd8813b2320fb0fa5a42ee8743928f72d0220d911ff3f757f501bae11c
  • SSDEEP 49152:dXN3u+RkDMYW0p/+TXLpp344216ZWcBwl6w/tibDmrVTSr:pUTVF/+TXLpp3442AFu/AbGS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  riseproevasionstealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2