Analysis
- max time kernel
147s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20240412-en - resource tags
- submitted
19/04/2024, 16:51
General
- Target 32a9b9beff2a1260642b3178310149fd5c4d0254346e7e3c50ff4b084c29ccff.exe
- Size 947KB
- Sample240419-vcsvmahg42
- SHA256 32a9b9beff2a1260642b3178310149fd5c4d0254346e7e3c50ff4b084c29ccff
Score
10/10
Malware Config
Extracted
Family
-
risepro
C2
-
147.45.47.93:58709
Signatures
- RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
Processes
-
C:\Users\Admin\AppData\Local\Temp\32a9b9beff2a1260642b3178310149fd5c4d0254346e7e3c50ff4b084c29ccff.exe"C:\Users\Admin\AppData\Local\Temp\32a9b9beff2a1260642b3178310149fd5c4d0254346e7e3c50ff4b084c29ccff.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/564-2-0x00000000039D0000-0x0000000003B28000-memory.dmp
memory/564-1-0x0000000003900000-0x00000000039C1000-memory.dmp
memory/564-3-0x0000000000400000-0x0000000001AB7000-memory.dmp
memory/564-4-0x0000000000400000-0x0000000001AB7000-memory.dmp
memory/564-6-0x0000000003900000-0x00000000039C1000-memory.dmp
memory/564-7-0x00000000039D0000-0x0000000003B28000-memory.dmp