Analysis
-
max time kernel
144s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
08/05/2024, 03:54
General
-
Target
2144cf9c43b185215ed7d45ae42287fb15f063e9d60149f74f204f205b9e2b46.exe
-
Size
3.1MB
-
MD5
df2c21b208ace815329c5cc8e878d649
-
SHA1
9651c25031da7a7af37fbede67244faf27b5a932
-
SHA256
2144cf9c43b185215ed7d45ae42287fb15f063e9d60149f74f204f205b9e2b46
-
SHA512
8f6ba57b49f4e82b302d011e5bd4050800d7a133c725b974aeacb049225fc14ebe0b75ffbb9eda2f42dd6c7548173a11a77181b4e101836828209ae089ddbd46
-
SSDEEP
98304:SVONxo0Gmumd67pjS7uPYJcaThp2HSev:SMNxo0JDdkU7h2yA
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2144cf9c43b185215ed7d45ae42287fb15f063e9d60149f74f204f205b9e2b46.exe"C:\Users\Admin\AppData\Local\Temp\2144cf9c43b185215ed7d45ae42287fb15f063e9d60149f74f204f205b9e2b46.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB