General

  • Target

    c2e6f7b28579030cca1320a1a1c2a349ddf12fe4837e62aa0fe5c3736ae555eb

  • Size

    3.1MB

  • Sample

    240407-y5afjade3w

  • MD5

    617626f51fba71ac3a8d8e52fc43784c

  • SHA1

    ba413b6aef61118693cbd5ca8fcda42fc6c57932

  • SHA256

    c2e6f7b28579030cca1320a1a1c2a349ddf12fe4837e62aa0fe5c3736ae555eb

  • SHA512

    9866cd81f47d352012a35292ad2cbbe74482d1dde095c2a7b24a0887c9277b18f48e2d6d490aa43b87bd092d86a72754f7d4926287546f1660d395ef00f4afdb

  • SSDEEP

    49152:pOtGELt7tNQkVaLLtf3CdBVsvvbiyhBCEXTMcNYgYx+DPy3Seb89vgfUn2Db:pORLtaL5fJtzCsiXOPAdm2UAb

Malware Config

Targets

    • Target

      c2e6f7b28579030cca1320a1a1c2a349ddf12fe4837e62aa0fe5c3736ae555eb

    • Size

      3.1MB

    • MD5

      617626f51fba71ac3a8d8e52fc43784c

    • SHA1

      ba413b6aef61118693cbd5ca8fcda42fc6c57932

    • SHA256

      c2e6f7b28579030cca1320a1a1c2a349ddf12fe4837e62aa0fe5c3736ae555eb

    • SHA512

      9866cd81f47d352012a35292ad2cbbe74482d1dde095c2a7b24a0887c9277b18f48e2d6d490aa43b87bd092d86a72754f7d4926287546f1660d395ef00f4afdb

    • SSDEEP

      49152:pOtGELt7tNQkVaLLtf3CdBVsvvbiyhBCEXTMcNYgYx+DPy3Seb89vgfUn2Db:pORLtaL5fJtzCsiXOPAdm2UAb

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks