General

  • Target

    69a3355c75942e2d94a60c6df5d353fa4662a91d64c677ec7378abd65d3909d6

  • Size

    3.1MB

  • Sample

    240407-3c1t8shg52

  • MD5

    efb684a4247a590854b121bf11401ba2

  • SHA1

    1b1885c42fa02f468c2a296a4130a731fb238e7a

  • SHA256

    69a3355c75942e2d94a60c6df5d353fa4662a91d64c677ec7378abd65d3909d6

  • SHA512

    4d33461b8104841e2ce00859304f85b3d3e7a615bbe71aebf0f4a280a66323aff8dff53e57f7fe144346ad73be59f85169a430b48a70f280db8c0d8aac4cf98d

  • SSDEEP

    98304:okE5oW15nI1DddhkghlzgTN6q7p79cTI8OHq8Tl/4u:okUoWXnwPkgzz3qpkI8OHBB/H

Malware Config

Targets

    • Target

      69a3355c75942e2d94a60c6df5d353fa4662a91d64c677ec7378abd65d3909d6

    • Size

      3.1MB

    • MD5

      efb684a4247a590854b121bf11401ba2

    • SHA1

      1b1885c42fa02f468c2a296a4130a731fb238e7a

    • SHA256

      69a3355c75942e2d94a60c6df5d353fa4662a91d64c677ec7378abd65d3909d6

    • SHA512

      4d33461b8104841e2ce00859304f85b3d3e7a615bbe71aebf0f4a280a66323aff8dff53e57f7fe144346ad73be59f85169a430b48a70f280db8c0d8aac4cf98d

    • SSDEEP

      98304:okE5oW15nI1DddhkghlzgTN6q7p79cTI8OHq8Tl/4u:okUoWXnwPkgzz3qpkI8OHBB/H

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks