Extracted

• • Target

    093bda46f4ebe927a99cc0e120d50d8c.exe

  • Size

    3.1MB

  • MD5

    093bda46f4ebe927a99cc0e120d50d8c

  • SHA1

    1312d8e21c7ac0fcf1f64067690151a86738c856

  • SHA256

    ffd113a300e84aa5e0f426f711104fb6f6ac411a5c02f620433a0bd76e30b141

  • SHA512

    83c2e93b5ddca444391afcb7229ec2ee2ed40f1637c05c4984f907d00643d8023b7ec344ae17410114cb123fb05a8f693866349318afb3844c39febabe06a475

  • SSDEEP

    49152:YQqdyW2QvYnYuHn2XYMGpokbLH+WYbIloN32VjGFbNNv9sCLBfqKtt/LBs3r7G8b:YQCyrmYnYiLlPbL2MVQYCVXLOaxc

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2