risepro | 1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96

Analysis

max time kernel
114s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2024 18:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe
Size

6.0MB
MD5

4f7561f046077c4ef12cfc0f9de2f061
SHA1

0c23ecc53a16ac37eee02cd4068e7703bf7a701a
SHA256

1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96
SHA512

f15dfab51317e7ec5d37fd20db9845a4875659ab6037b0b178f89cb2ab197edd5ad5261e2a3e94eab9090749cf83faee476859ee56d07c1ab60d1afb7ac04ede
SSDEEP

98304:0G7YAdjJI7iMD00WfN/lAg7Ih3ShjxFdohx1VA+L7b91338JuABzk:r7d1ApWfvPS3e/qlP38lBA

Score

10^/10

risepro stealer

Malware Config

Extracted

Family

risepro

147.45.47.116:50500

Signatures

RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
stealer risepro

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe

pid	process
996	1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe
996	1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe

C:\Users\Admin\AppData\Local\Temp\1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe
"C:\Users\Admin\AppData\Local\Temp\1de47025421234e0d8b32ea3f565f013ba7c48f3039e60c52615c1491f708e96.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3596 --field-trial-handle=2256,i,18272763564106695635,11201593968620719822,262144 --variations-seed-version /prefetch:8
1⤵
PID:1060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/996-0-0x0000000000910000-0x0000000001402000-memory.dmp

Filesize
10.9MB

Download
memory/996-1-0x0000000001950000-0x0000000001951000-memory.dmp

Filesize
4KB

Download
memory/996-2-0x0000000001960000-0x0000000001961000-memory.dmp

Filesize
4KB

Download
memory/996-3-0x0000000001970000-0x0000000001971000-memory.dmp

Filesize
4KB

Download
memory/996-4-0x00000000035A0000-0x00000000035A1000-memory.dmp

Filesize
4KB

Download
memory/996-5-0x00000000035B0000-0x00000000035B1000-memory.dmp

Filesize
4KB

Download
memory/996-6-0x00000000035C0000-0x00000000035C1000-memory.dmp

Filesize
4KB

Download
memory/996-7-0x00000000035D0000-0x00000000035D1000-memory.dmp

Filesize
4KB

Download
memory/996-8-0x00000000035E0000-0x00000000035E1000-memory.dmp

Filesize
4KB

Download
memory/996-9-0x00000000035F0000-0x00000000035F1000-memory.dmp

Filesize
4KB

Download
memory/996-10-0x0000000003600000-0x0000000003601000-memory.dmp

Filesize
4KB

Download
memory/996-12-0x0000000003620000-0x0000000003621000-memory.dmp

Filesize
4KB

Download
memory/996-11-0x0000000003610000-0x0000000003611000-memory.dmp

Filesize
4KB

Download
memory/996-13-0x0000000003640000-0x0000000003641000-memory.dmp

Filesize
4KB

Download
memory/996-14-0x0000000003650000-0x0000000003651000-memory.dmp

Filesize
4KB

Download
memory/996-15-0x0000000003660000-0x0000000003661000-memory.dmp

Filesize
4KB

Download
memory/996-16-0x0000000003670000-0x0000000003671000-memory.dmp

Filesize
4KB

Download
memory/996-18-0x0000000003690000-0x0000000003691000-memory.dmp

Filesize
4KB

Download
memory/996-17-0x0000000003680000-0x0000000003681000-memory.dmp

Filesize
4KB

Download
memory/996-19-0x00000000036A0000-0x00000000036A1000-memory.dmp

Filesize
4KB

Download
memory/996-21-0x00000000036C0000-0x00000000036C1000-memory.dmp

Filesize
4KB

Download
memory/996-20-0x00000000036B0000-0x00000000036B1000-memory.dmp

Filesize
4KB

Download
memory/996-22-0x00000000036D0000-0x00000000036D1000-memory.dmp

Filesize
4KB

Download
memory/996-23-0x00000000036E0000-0x00000000036E1000-memory.dmp

Filesize
4KB

Download
memory/996-24-0x0000000003800000-0x0000000003801000-memory.dmp

Filesize
4KB

Download
memory/996-26-0x0000000003820000-0x0000000003821000-memory.dmp

Filesize
4KB

Download
memory/996-25-0x0000000003810000-0x0000000003811000-memory.dmp

Filesize
4KB

Download
memory/996-27-0x0000000000910000-0x0000000001402000-memory.dmp

Filesize
10.9MB

Download
memory/996-30-0x0000000000910000-0x0000000001402000-memory.dmp

Filesize
10.9MB

Download