Analysis
-
max time kernel
142s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
18/06/2024, 16:39
General
-
Target
adeef67b62b4bd907bbb08732af7c09bef28af8f4b35fc38f8f9f736d5f7bdfa.exe
-
Size
1.3MB
-
MD5
8674ff0454272b30acb7f215a3f9ac49
-
SHA1
fb4b454efc2e28873787f09fcae72d7177d0872c
-
SHA256
adeef67b62b4bd907bbb08732af7c09bef28af8f4b35fc38f8f9f736d5f7bdfa
-
SHA512
421686d1b84cad535d234e5348a26a81b5e33119d89b499c157215c9d47b8ea9926cb2b1d1736fdf63d84a0c9708af3b6b54ac97ecfbe8a2edfd72c55fa23211
-
SSDEEP
24576:Y4Ou12NrLF5eq5QNCIrkDqSXKDqSv2Hf3awQusiK3QXQ9aOl5Lj:vcvFoq5QNBMKDN+/al73Q6aOf
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adeef67b62b4bd907bbb08732af7c09bef28af8f4b35fc38f8f9f736d5f7bdfa.exe"C:\Users\Admin\AppData\Local\Temp\adeef67b62b4bd907bbb08732af7c09bef28af8f4b35fc38f8f9f736d5f7bdfa.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB