Extracted

• • Target

    f8134c15ead6882c072b80bf25ce0d5d337e8e896b75ed1ed3bda9813ac3675a

  • Size

    3.1MB

  • MD5

    68236a4c843447e564f46e8070a37d61

  • SHA1

    c298eb1253b769a02c744e54af901f17af5f9d9e

  • SHA256

    f8134c15ead6882c072b80bf25ce0d5d337e8e896b75ed1ed3bda9813ac3675a

  • SHA512

    2851e02028de18e19f1d67de92bf08409fb96ce035715637299dce144e3f9069ec7019ccf7c67c337616d20481bd860550d117c5055a50263d3a62f1b440a770

  • SSDEEP

    49152:5rIoaK+krG+LFoo5yOhr2Z+FnIqA7XWxrdMmXsrEV3QRKnma40aK0A/LntkdXCNx:5RltfgOl2Z+64dLg82KnminEox

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2