Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
- submitted
20/04/2024, 01:02
General
- Target 09c9e09ef1371e9bc9292abce47d8bd0fdae9cb9fecc42ccfd51f983f43e2bdf.exe
- Size 915KB
- Sample240420-beamaadb3s
- SHA256 09c9e09ef1371e9bc9292abce47d8bd0fdae9cb9fecc42ccfd51f983f43e2bdf
Score
10/10
Malware Config
Extracted
Family
-
risepro
C2
-
147.45.47.93:58709
Signatures
- RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\09c9e09ef1371e9bc9292abce47d8bd0fdae9cb9fecc42ccfd51f983f43e2bdf.exe"C:\Users\Admin\AppData\Local\Temp\09c9e09ef1371e9bc9292abce47d8bd0fdae9cb9fecc42ccfd51f983f43e2bdf.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 5802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2632 -ip 26321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2632-1-0x0000000004AD0000-0x0000000004B85000-memory.dmp
memory/2632-2-0x0000000004B90000-0x0000000004CE8000-memory.dmp
memory/2632-3-0x0000000000400000-0x0000000002CC8000-memory.dmp
memory/2632-4-0x0000000000400000-0x0000000002CC8000-memory.dmp
memory/2632-6-0x0000000004AD0000-0x0000000004B85000-memory.dmp
memory/2632-7-0x0000000004B90000-0x0000000004CE8000-memory.dmp