Extracted

• • Target

    68a5c5dfa2ca92c58a0ebe32e7b0db6c30e12151a5debc726a5a49447cc4d2b9

  • Size

    2.2MB

  • MD5

    fa82254820f30a250062e39d390250ff

  • SHA1

    00a8e12855e721e4dfc09be3c673f3c00124895a

  • SHA256

    68a5c5dfa2ca92c58a0ebe32e7b0db6c30e12151a5debc726a5a49447cc4d2b9

  • SHA512

    8fdd636e78a995ee2c0c9067024952adf8234938b7652e4719008c1415b499c28abfd8aa64c20d9b29b354ae4c4cd9bc4125d0f197399efed5392feb4d99cf0a

  • SSDEEP

    49152:0J+B6OcRYXDx1lKXSGsxRqUsMPdy2CTGsqroV3SuR6x38uX9GP1:0ihzESGsKUz1y2PJny6quW

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2