Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2b2360e49132f57908853079cd0afa5c50ae3c460f08001c1dbe205f0db9982

  • Size

    2.2MB

  • Sample

    240410-njb25aha5y

  • MD5

    d0c2a50f6852dc774c2f78fa8e475bd6

  • SHA1

    ea0aa9bfe93f3e9a71ef4eb59cc025a73cd949c8

  • SHA256

    d2b2360e49132f57908853079cd0afa5c50ae3c460f08001c1dbe205f0db9982

  • SHA512

    b8939879c0ef64fbf217243c6ab3062a6c150164869eeacce94be6408f48d31d9fb13087b52d8a7ab81756629eb883f1e00736c7af70fbf42b745b44e1d0d573

  • SSDEEP

    49152:qs9NRR5MmyC8+CYVdzSjPiMcLti57HuDx1l2xw6XE/2/Z3FqQr:qQNRG3YVd2jqthG7ODwA2/Z1z

Score
10/10
riseproevasionstealer

Malware Config

Targets

    • Target

      d2b2360e49132f57908853079cd0afa5c50ae3c460f08001c1dbe205f0db9982

    • Size

      2.2MB

    • MD5

      d0c2a50f6852dc774c2f78fa8e475bd6

    • SHA1

      ea0aa9bfe93f3e9a71ef4eb59cc025a73cd949c8

    • SHA256

      d2b2360e49132f57908853079cd0afa5c50ae3c460f08001c1dbe205f0db9982

    • SHA512

      b8939879c0ef64fbf217243c6ab3062a6c150164869eeacce94be6408f48d31d9fb13087b52d8a7ab81756629eb883f1e00736c7af70fbf42b745b44e1d0d573

    • SSDEEP

      49152:qs9NRR5MmyC8+CYVdzSjPiMcLti57HuDx1l2xw6XE/2/Z3FqQr:qQNRG3YVd2jqthG7ODwA2/Z1z

    Score
    10/10
    riseproevasionstealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks