General

  • Target

    3060-23-0x0000000000400000-0x0000000000802000-memory.dmp

  • Size

    4.0MB

  • MD5

    f0833024c0ddf2bdee8f1e7d7f4565b3

  • SHA1

    9dc47e9560645b3c812fbfb457227c343750b60d

  • SHA256

    3b9f6abf1469598772b854849ff9015b08df48d2bfc9a5c63479b2d37e98a212

  • SHA512

    f7160de6aa883a0c9dc8f0b4b1950e4945a6fd2a58145f4581fcca75a8bdf114a74a4224d4453bd936ed58429dd5d882f5036a3e6c0c33b7b692fe05978249e1

  • SSDEEP

    98304:6WEcuVLtejhIDSNSepq8B6yepCmO+hs3MTn6aJN:6W+DSpq8BnEJTn6i

Score
10/10

Malware Config

Extracted

Family

risepro

C2

24.157.161.152:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3060-23-0x0000000000400000-0x0000000000802000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections