Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 01:33

General

  • Target

    90b05090c9b890eab41e099167ce5da26e86e889b6a27753966cefdb7aeca0b9.exe

  • Size

    6.2MB

  • MD5

    b2b244cea4c2f51c3a69248dd3a68e4a

  • SHA1

    4a74212f942929c2ed73b075d57ac41c1f675e44

  • SHA256

    90b05090c9b890eab41e099167ce5da26e86e889b6a27753966cefdb7aeca0b9

  • SHA512

    3f128843ed766ea22d4f0081503d13bf0e8da5a2e1bdfc12d50009bfe5f680a07b6e03455e10b55eee714ba95122e5cff58589883d2f0e403c0bb67c943127be

  • SSDEEP

    196608:Dlzwqx9vtPh3iNhsnGgZxomlDYiF7NDOvz1MP/MWUse:Fwm9vtBHZbomxYiB8b1MHM

Score
10/10

Malware Config

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90b05090c9b890eab41e099167ce5da26e86e889b6a27753966cefdb7aeca0b9.exe
    "C:\Users\Admin\AppData\Local\Temp\90b05090c9b890eab41e099167ce5da26e86e889b6a27753966cefdb7aeca0b9.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2192-0-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-2-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-4-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-6-0x00000000002D0000-0x0000000000F97000-memory.dmp

    Filesize

    12.8MB

  • memory/2192-5-0x00000000000B0000-0x00000000000B1000-memory.dmp

    Filesize

    4KB

  • memory/2192-8-0x00000000000B0000-0x00000000000B1000-memory.dmp

    Filesize

    4KB

  • memory/2192-10-0x00000000000B0000-0x00000000000B1000-memory.dmp

    Filesize

    4KB

  • memory/2192-30-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-28-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-25-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2192-23-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2192-20-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2192-18-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2192-15-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/2192-13-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/2192-36-0x00000000002D0000-0x0000000000F97000-memory.dmp

    Filesize

    12.8MB

  • memory/2192-38-0x00000000002D0000-0x0000000000F97000-memory.dmp

    Filesize

    12.8MB