Extracted

• • Target
    SecuriteInfo.com.Win32.TrojanX-gen.20415.25254.exe
  • Size 2.0MB
  • SHA256 77ed461936508b99338a5f7bf93ce4e014eb121ecfa75378b09a307528f3be05
  • MD5 1a43bad4990aef9bf3cbb4db9064d600
  • SHA1 c7ada9b73b788857e46b84f571236b0f5166085b
  • SHA512 09823ffee2d4527eecb2729ea15b99f03ff0c464321d2bd3b51a546a5b6cf77d9c1ddffdcb5679ee39bbac6e5100b828589c58f291a3f9b29f47fbc8dc03c4be
  • SSDEEP 49152:m7ciTg0km05deuv7pTmZO9jrAUnNmTKRZH/Xms5U/:Wcag8qeipTm0r2TEpvmsK/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  riseproevasionstealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2