Analysis
-
max time kernel
146s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
17/06/2024, 05:49
General
-
Target
07127f2db2fd0fbf8f2b707f9ab2e50947591acc691e8f4c124aa0e71fcd4b2b.exe
-
Size
1.3MB
-
MD5
6059aba04635f2a7f90a3db87096c362
-
SHA1
0aede0ad29795496c0bce444e567f37533b6599e
-
SHA256
07127f2db2fd0fbf8f2b707f9ab2e50947591acc691e8f4c124aa0e71fcd4b2b
-
SHA512
671adc4f00a80ff3c05fe5de9442c22b5e2c4925b42729929013b65584fb00b445060e81330976f70959484d525b593570fe366dbcc9c9ba42debdff0354bb94
-
SSDEEP
24576:mmSoX1LCPju7/vfgR9Dn0C/eWIwQwsiK3cbadInQ3v0lH7mxCt:mmLNEy7/ngAC/erlh3kQcH7mxq
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\07127f2db2fd0fbf8f2b707f9ab2e50947591acc691e8f4c124aa0e71fcd4b2b.exe"C:\Users\Admin\AppData\Local\Temp\07127f2db2fd0fbf8f2b707f9ab2e50947591acc691e8f4c124aa0e71fcd4b2b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB