General

  • Target

    b3325dff4255f1c57e4c8e790629cf78a3c3c35014e5598328c05e7418c52ba6

  • Size

    2.0MB

  • Sample

    240403-p2yvaadc7t

  • MD5

    7017f439b4200a073cbfbaefc3c10e94

  • SHA1

    c5fc77a96e42439e11670f78ec8e9db1c8e2482f

  • SHA256

    b3325dff4255f1c57e4c8e790629cf78a3c3c35014e5598328c05e7418c52ba6

  • SHA512

    b6b73d0eea13761d3a8aa359e2e6757687504b89ea3c1185dc02c61309eecd7608ddb896404604ab525d6312a5488f01bb9df03ca3d3c2e2f65895981dd8667d

  • SSDEEP

    49152:9aR2wtFNbcdc16u6B+sUnfXXL96Y1cCjdtTDme:9aRjO+XGMPLY3Cjd9

Score
10/10

Malware Config

Targets

    • Target

      b3325dff4255f1c57e4c8e790629cf78a3c3c35014e5598328c05e7418c52ba6

    • Size

      2.0MB

    • MD5

      7017f439b4200a073cbfbaefc3c10e94

    • SHA1

      c5fc77a96e42439e11670f78ec8e9db1c8e2482f

    • SHA256

      b3325dff4255f1c57e4c8e790629cf78a3c3c35014e5598328c05e7418c52ba6

    • SHA512

      b6b73d0eea13761d3a8aa359e2e6757687504b89ea3c1185dc02c61309eecd7608ddb896404604ab525d6312a5488f01bb9df03ca3d3c2e2f65895981dd8667d

    • SSDEEP

      49152:9aR2wtFNbcdc16u6B+sUnfXXL96Y1cCjdtTDme:9aRjO+XGMPLY3Cjd9

    Score
    10/10
    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

MITRE ATT&CK Enterprise v15

Tasks