General

  • Target

    5ba5a60e695deff705c718e93096ec8cd09b69b5122d7b57e7b7ee5dc2648ee2

  • Size

    2.0MB

  • Sample

    240403-njkdhada24

  • MD5

    1ccb84e56dbf96c44e96af29587fa8dc

  • SHA1

    57507fa3106db3daac1cea20627e9e1cc2689ff4

  • SHA256

    5ba5a60e695deff705c718e93096ec8cd09b69b5122d7b57e7b7ee5dc2648ee2

  • SHA512

    19a042b2c3ba90a3d72ff3d16da827bdf5545460bfcccce40095d809acc31c7c900c213259aac3911c87b5317103df214ceeb3b36270d7433facdf9a7d222a49

  • SSDEEP

    49152:FaR2wtFNbcdc16u4Y0EcafkCzyqKlTVvHLpwCCUQ:FaRjO+X4Y0Eca8bDvHV

Score
10/10

Malware Config

Targets

    • Target

      5ba5a60e695deff705c718e93096ec8cd09b69b5122d7b57e7b7ee5dc2648ee2

    • Size

      2.0MB

    • MD5

      1ccb84e56dbf96c44e96af29587fa8dc

    • SHA1

      57507fa3106db3daac1cea20627e9e1cc2689ff4

    • SHA256

      5ba5a60e695deff705c718e93096ec8cd09b69b5122d7b57e7b7ee5dc2648ee2

    • SHA512

      19a042b2c3ba90a3d72ff3d16da827bdf5545460bfcccce40095d809acc31c7c900c213259aac3911c87b5317103df214ceeb3b36270d7433facdf9a7d222a49

    • SSDEEP

      49152:FaR2wtFNbcdc16u4Y0EcafkCzyqKlTVvHLpwCCUQ:FaRjO+X4Y0Eca8bDvHV

    Score
    10/10
    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

MITRE ATT&CK Enterprise v15

Tasks