Extracted

• • Target
    SecuriteInfo.com.Win32.TrojanX-gen.765.10019.exe
  • Size 1.9MB
  • SHA256 c4dcff4ee306e711dad98b387ebbf536555159f7ee7328b36bd183837b5114cc
  • MD5 17e453856769c1c2054e07a01cbc4476
  • SHA1 2627796cea838817328fb0fb40625cc46bf21915
  • SHA512 0aaedcbdf5d2d8ff2f261356dafdaf5a5eb31c8a700e07344153052f91bf5cfe2431247aa56bd9d94783053e89b55ec0ded0fd02ebf96620779beeafceed0ba9
  • SSDEEP 49152:pzOId/SWPGqXoNTZ3WpmSvLp9unqH+A3BILMGyGqZcqLqLbGv+N:t3d6WvoNtY9uqH+UIgFNQCv+N
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  riseproevasionstealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2