Overview

overview

10

Static

static

8

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-03-2024 18:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    faea4ccd802391bf9a6d71bc6052f269b6ca370c124bfe4d2faae55b43a5c0c8.exe

  • Size

    4.3MB

  • MD5

    a263a25d204194fa5e17f07330b9a411

  • SHA1

    a1d4f97dd06f2e3bb343a564601a6055e12ebcec

  • SHA256

    faea4ccd802391bf9a6d71bc6052f269b6ca370c124bfe4d2faae55b43a5c0c8

  • SHA512

    003d70099729511e04ca0104a5315aba1495112bcdd64e3f07d2286a9f0e61b1fa6a8ca78d296220bd835b9c2a741813fa5a57dc9f86650492dc3b228d6e3ac5

  • SSDEEP

    49152:dCXtvRXOhEc2Mgy+uTEGQp8EaQZaFChW7ZaAXN1y61/jQaOM7ZHfrMuEkvqy5wWI:dCxRXOhEc2MgRHTp+fXJjxLSytuw

Score
10/10
riseprostealer

Malware Config

Extracted

Family

risepro

C2

37.120.237.196:50500

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

Processes

  • C:\Users\Admin\AppData\Local\Temp\faea4ccd802391bf9a6d71bc6052f269b6ca370c124bfe4d2faae55b43a5c0c8.exe
    "C:\Users\Admin\AppData\Local\Temp\faea4ccd802391bf9a6d71bc6052f269b6ca370c124bfe4d2faae55b43a5c0c8.exe"
    1⤵
      PID:3504

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3504-0-0x0000000002C30000-0x0000000002D74000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/3504-1-0x0000000002C30000-0x0000000002D74000-memory.dmp
      Filesize

      1.3MB

      Download