Extracted

• • Target
    a657275b4b04d87b45832c0f7c05d383.exe
  • Size 3.0MB
  • SHA256 aac8661a76a3e499acc10645da7ddbf4bb42947da5d5b4da44f568a5644af51d
  • MD5 a657275b4b04d87b45832c0f7c05d383
  • SHA1 f77b97be743571ffba984dbed36437f3f2db1d5a
  • SHA512 94119f0b63d82ce03f14eeaa7950ca05e33cae0d95d61407db1132ed6ed9e4860ce72125579dc25f33fbee57c2f45abdaf04b4076f5f3bdaa619028f62ab3b63
  • SSDEEP 49152:4Hd198tp0l27Fd7iXaE8jk0RYk+hQdfr:4919vl2L7iXaE8IOqQpr
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  riseproevasionstealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2