risepro | a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea

Analysis

max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 04:01

Target

a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea.exe
Size

888KB
MD5

446f080cd1ed262b4dd0c1ff2143297e
SHA1

b958c52622a02d7ed530f6d41a7e7c24a27f7918
SHA256

a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea
SHA512

b176604cb47c789b42db3119df7480b5b25c126682cc6ad769d963b1cab228da0db277c1b007365962da89d62657ee01cd5c153fec00d2fb1afe312b9d6488de
SSDEEP

12288:nrpWNztODIkpIKLFkXLWR4ICfCjDmEtx9YGk5gtB2f1pnYbn+Bnd+WDbLEa:1ZIkqKz4/fa6SId229Gb+z+2LEa

Score

10^/10

risepro stealer

Family

risepro

147.45.47.93:58709

RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
stealer risepro
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4336 400 WerFault.exe a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea.exe

pid	pid_target	process	target process
4336	400	WerFault.exe	a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea.exe

C:\Users\Admin\AppData\Local\Temp\a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea.exe
"C:\Users\Admin\AppData\Local\Temp\a211901dea69eab959b9e47a6276ba7f363b6857687c410adcaf56135586b7ea.exe"
1⤵
PID:400
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 584
  2⤵
  - Program crash
  PID:4336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 400 -ip 400
1⤵
PID:3100

memory/400-1-0x0000000002D90000-0x0000000002E47000-memory.dmp

Filesize
732KB

Download
memory/400-2-0x00000000049A0000-0x0000000004AEF000-memory.dmp

Filesize
1.3MB

Download
memory/400-3-0x0000000000400000-0x0000000000552000-memory.dmp

Filesize
1.3MB

Download
memory/400-4-0x0000000000400000-0x0000000002CC0000-memory.dmp

Filesize
40.8MB

Download
memory/400-5-0x0000000002D90000-0x0000000002E47000-memory.dmp

Filesize
732KB

Download
memory/400-7-0x00000000049A0000-0x0000000004AEF000-memory.dmp

Filesize
1.3MB

Download
memory/400-8-0x0000000000400000-0x0000000000552000-memory.dmp

Filesize
1.3MB

Download