risepro | 2caec1ce51c8304261e5ac88333d805a13c5fa2b0ca1c0c19a7e5a9a2af78b43 | Triage

Analysis

max time kernel
146s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2024, 17:50

Sharing

Report Analysis Logs

General

Target

file.exe
Size

5.2MB
MD5

9ffa99ae9f8ab00f8e944cb3317f1dd3
SHA1

e588096d37f99b4ffd92901e944dd76071729005
SHA256

2caec1ce51c8304261e5ac88333d805a13c5fa2b0ca1c0c19a7e5a9a2af78b43
SHA512

975d64247680f4ba7b8145fac282d76508efd1099b55fcb2e100979661e8f5c94cd089e364e3d60bba0af7b530cd6a790567e98998823dfb6f7d2eee25cc5511
SSDEEP

98304:2QTLK3OmctIY4tTNEsxwyNJqSVCS+Nfl4gvqvU7dYblDQdKw7:I3AIYxvyrzVCVNN4bcJYbidKw

Score

10^/10

risepro stealer

Malware Config

Signatures

RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
stealer risepro

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3468	file.exe
3468	file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3468-0-0x0000000001450000-0x0000000001451000-memory.dmp

Filesize
4KB

Download
memory/3468-1-0x0000000000540000-0x0000000000E55000-memory.dmp

Filesize
9.1MB

Download
memory/3468-2-0x0000000000540000-0x0000000000E55000-memory.dmp

Filesize
9.1MB

Download
memory/3468-5-0x0000000000540000-0x0000000000E55000-memory.dmp

Filesize
9.1MB

Download