Extracted

• • Target

    dac1fc6c726b15476e024cf454dfe1deedcc284c4ac7e0fb991a1b175d6901c5

  • Size

    3.1MB

  • MD5

    08efc28a934c2c71dc6cf6460c3cd700

  • SHA1

    dc9c5f925ee08cff9464fa18b8c85a6161b69f34

  • SHA256

    dac1fc6c726b15476e024cf454dfe1deedcc284c4ac7e0fb991a1b175d6901c5

  • SHA512

    9e6076d2c70740b6ca790297e320f0eb7fdfafed8df1e21ca1de6671583f461f98209df581262055572bc3b5e19e5b2410b5e6c7cade2d821040e4f6440da744

  • SSDEEP

    49152:avrRSI22nIPE8pW/8tCDLnVMh2BwbVEnTUFs9EmvgMJAEk7G1c0ULN4MHpviXsjq:aM2nGWfnVRwW9NvfJ8McxNRH6l

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2