Analysis
-
max time kernel
296s -
max time network
300s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
02/05/2024, 06:18
General
-
Target
e9d629796bf84169c7e2325762a46aca873025e1078543bd700397f2c9b3ef6d.exe
-
Size
5.5MB
-
MD5
56c147c6c6f51cb02984a1f48b7cecea
-
SHA1
9489e556c2b3d52d7a749be789cd73fb55c476a7
-
SHA256
e9d629796bf84169c7e2325762a46aca873025e1078543bd700397f2c9b3ef6d
-
SHA512
8de919c290b2a27ac922c0956e581fd2a4b036f42c2353e4e4c1a231efeb40935e0c48db18ae7d04b7ffb86b9486e45a3dc897054000fea310dd12fb2c45aa7f
-
SSDEEP
98304:AErV/1KzgHzh/QtEQFvVWpaub/1HwZm6O9VOosVtjL1AvASTbhsI:fV/oEHN/QtEgvuzx/J9MosVl1DS
Score
10/10
Malware Config
Extracted
Family
risepro
C2
194.169.175.123
Signatures
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9d629796bf84169c7e2325762a46aca873025e1078543bd700397f2c9b3ef6d.exe"C:\Users\Admin\AppData\Local\Temp\e9d629796bf84169c7e2325762a46aca873025e1078543bd700397f2c9b3ef6d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
9.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.8MB