General

  • Target

    3796-145-0x0000000000190000-0x00000000006C2000-memory.dmp

  • Size

    5.2MB

  • MD5

    dab6ac76ec5507622fd8c01d535bb4e2

  • SHA1

    36b648eac6998e91265a2b7bb6f88865a52e4342

  • SHA256

    bd2fcdf465ab16c5d8192ede37f3e54c469a8016273e4081621af873f8b43c71

  • SHA512

    b63eea166ed4dfccea588f7b3b2fe6040b9b31ad3aa40991757cb4e579868fecc43938b88a549f91d17a158283a3668af472a873a5e20dd7a7c611e1dd447de6

  • SSDEEP

    98304:tSeNpXZzKBOG/uGQL9WwMtPuw5MKOlK2i/5VmEzJG:sKXZmBF/RQL9WNBuw5rOm5wa

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3796-145-0x0000000000190000-0x00000000006C2000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections