Extracted

• • Target

    ab0be146c144b74dacdc392671a4ac9c1b92a7dc841eb2363b6f8d81e60d86f6

  • Size

    2.2MB

  • MD5

    2bd0028e370c5c693c89f442e2ecfbe1

  • SHA1

    803d2754d05eeb8ddb9f8ffa81186b60825e0bd7

  • SHA256

    ab0be146c144b74dacdc392671a4ac9c1b92a7dc841eb2363b6f8d81e60d86f6

  • SHA512

    ddaeaf9049afc6a4c05a1f0ae0bedf1bac8028bf7b7c674920935948477f8f119cc5987d95f76f16f55914a042ad982fd342bb4054c784de31c68bd325f16179

  • SSDEEP

    49152:b/n6334gvDBUd3u/EgJuuDGz02vxU6fvyxPdgHL6/hYiqrg9eVlRP:TGIii3usuuuaztxUCKxPd2LYhYi1wlx

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2