Analysis
-
max time kernel
298s -
max time network
299s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
20/06/2024, 22:39
General
-
Target
2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe
-
Size
1.3MB
-
MD5
0b1e103954d548c038552f0f7ca05b44
-
SHA1
d969b32b6af59417c603a8e79f35fa0d0b7f6b3d
-
SHA256
2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899
-
SHA512
ad821e76899a59956a4aeab072abbb66fad0cac437a54979dff472017668bbd306fdeb803c58c0d2987b25101c11a88730d2c9a86f6dd38d57a03c883ef9ba57
-
SSDEEP
24576:K5OjvoNby5WcISAAlPvKTaBmXGD6aWvalwQL6icoEC5hD3F89hbmSK:Ljsy5nISpPKaBsvallCoEQhTYbm
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 30 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe"C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB