Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 23:41

General

  • Target

    a992426f62bad525066f29f8639045fee6f1c65561cf44a8562a26b1a6b7bef2.exe

  • Size

    4.4MB

  • MD5

    00921766ce6679365fa7f9406a3c6370

  • SHA1

    2b826eff84db2c4e5e3ae8886d71f6033972dc6d

  • SHA256

    a992426f62bad525066f29f8639045fee6f1c65561cf44a8562a26b1a6b7bef2

  • SHA512

    23281b6d2b84b8e658fd953917ebcf81ed6ffd8c174aee4df570981544864cf2e18a89b591466f62b40b01f9b600868cddfeaf819753645078ac3bfa2adabee8

  • SSDEEP

    49152:Ac41xeac5wf40fTL2oD8Nl6UdMSQt9wBfRXMaxGQeocr2LetyDFNbDQAb844t7dS:34hc1gSo4LQIhQOcr2LetyrD74t7E

Score
10/10

Malware Config

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a992426f62bad525066f29f8639045fee6f1c65561cf44a8562a26b1a6b7bef2.exe
    "C:\Users\Admin\AppData\Local\Temp\a992426f62bad525066f29f8639045fee6f1c65561cf44a8562a26b1a6b7bef2.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1992-31-0x0000000000CF7000-0x0000000000F04000-memory.dmp

    Filesize

    2.1MB

  • memory/1992-29-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/1992-27-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/1992-24-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/1992-22-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/1992-19-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/1992-17-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/1992-14-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/1992-12-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/1992-9-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/1992-7-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/1992-5-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/1992-4-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1992-2-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1992-0-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1992-30-0x0000000000B70000-0x0000000001365000-memory.dmp

    Filesize

    8.0MB