Analysis
- max time kernel
93s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
03/04/2024, 18:06
General
- Target bf29c3b63c4ccbe13b992c38fe77db84.exe
- Size 6.3MB
- Sample240403-wpqrgagh57
- SHA256 f97eb624788a376bcc46df06bff907932ff8cb15b7229c7192bec4a1cd8079c5
Score
10/10
Malware Config
Signatures
- RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bf29c3b63c4ccbe13b992c38fe77db84.exe"C:\Users\Admin\AppData\Local\Temp\bf29c3b63c4ccbe13b992c38fe77db84.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/720-1-0x0000000001A80000-0x0000000001A81000-memory.dmp
memory/720-0-0x0000000001A70000-0x0000000001A71000-memory.dmp
memory/720-3-0x0000000000800000-0x00000000014DF000-memory.dmp
memory/720-2-0x0000000001A90000-0x0000000001A91000-memory.dmp
memory/720-4-0x0000000001AB0000-0x0000000001AB1000-memory.dmp
memory/720-6-0x0000000001AD0000-0x0000000001AD1000-memory.dmp
memory/720-5-0x0000000000800000-0x00000000014DF000-memory.dmp
memory/720-7-0x00000000037A0000-0x00000000037A1000-memory.dmp
memory/720-13-0x0000000000800000-0x00000000014DF000-memory.dmp
memory/720-15-0x0000000000800000-0x00000000014DF000-memory.dmp