General

  • Target

    2100-2-0x0000000000210000-0x0000000000D51000-memory.dmp

  • Size

    11.3MB

  • MD5

    de06105ba86c2b1064f84f3ccd29f48c

  • SHA1

    ab1bd906f0054bfae90498540a1d1b50d9ae5151

  • SHA256

    389287872be35feccfc58481c37d03f25dc06c6e929657bfd39adf0d822a716e

  • SHA512

    bbe4f9c968c07eafadaa96129b866af4b25983bf959f71b74fd2377b4bcfd88e1256f3594fbbfca2004e01ddb70bbd815c728d4fe50a9b681d5e925ad460e901

  • SSDEEP

    196608:hCP4IIGFHiOgk0Ae2eSqfMP6GC/Vkldn1gkeHNSUIBW:hbUi3KrqfMCGEkldnqkeso

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.67:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2100-2-0x0000000000210000-0x0000000000D51000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections