Analysis
-
max time kernel
148s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
-
submitted
10/05/2024, 14:03
General
-
Target
c99ffc20899fccc6c8bd1d083dca14179a49fcac0e68995994f957dd5ea062c4.exe
-
Size
3.1MB
-
MD5
21ec1ddf068ab00c2a297af01d29c90b
-
SHA1
02c5e3f5d500e6c3d48b201bf44b07f4dc5d6e2e
-
SHA256
c99ffc20899fccc6c8bd1d083dca14179a49fcac0e68995994f957dd5ea062c4
-
SHA512
14576628af5ea15c6ba02bb0ec963666b89013f446d0ac1c0920114c0afb56f16da5a7560dd851ab128fc20cd49192855e16778bd890431d7c3f0a5a1e2a569b
-
SSDEEP
98304:EIb706HGC+ttERmZwSUVimc9bwbNsu4c:EIbYNC+tugwFipK5su
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c99ffc20899fccc6c8bd1d083dca14179a49fcac0e68995994f957dd5ea062c4.exe"C:\Users\Admin\AppData\Local\Temp\c99ffc20899fccc6c8bd1d083dca14179a49fcac0e68995994f957dd5ea062c4.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB