risepro | 487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d

Analysis

max time kernel
91s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
15/05/2024, 13:13

Target

487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe
Size

8.3MB
MD5

20f676755aaed59eae1193bfe9b3ba0e
SHA1

9b79d150d84dd644183077bec4c2445e3061f63d
SHA256

487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d
SHA512

7f8392a43abc1bd0d256f35e2d41ff53eda216244c6da66d6614b1d083e27e29c4ab6f58cc283693c899dec22b4ef3cab4df04c2f9d7fb4da4c858cfbce16a33
SSDEEP

196608:cS1kfyzeeXVqlLJe03EmuFXxj72b5Hp1vWcDv+e:cwkKzeeXVqf0BFh/2RvHDN

Score

10^/10

risepro stealer

Family

risepro

5.42.96.54:50500

RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
stealer risepro

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1964	487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe
1964	487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe

C:\Users\Admin\AppData\Local\Temp\487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe
"C:\Users\Admin\AppData\Local\Temp\487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1964

memory/1964-0-0x00000000020E0000-0x00000000020E1000-memory.dmp

Filesize
4KB

Download
memory/1964-1-0x0000000000AE0000-0x0000000001A7A000-memory.dmp

Filesize
15.6MB

Download
memory/1964-2-0x0000000000ED2000-0x0000000001222000-memory.dmp

Filesize
3.3MB

Download
memory/1964-8-0x0000000000AE0000-0x0000000001A7A000-memory.dmp

Filesize
15.6MB

Download
memory/1964-9-0x0000000000ED2000-0x0000000001222000-memory.dmp

Filesize
3.3MB

Download
memory/1964-10-0x0000000000AE0000-0x0000000001A7A000-memory.dmp

Filesize
15.6MB

Download