Extracted

• • Target

    0bed782633acafd96d1242d8a06017fa41ba578d75923289aa9cd199f6bed331

  • Size

    3.4MB

  • MD5

    950ca803af0ca2fe06414a0b1a9b08ad

  • SHA1

    30cfd61e4f0b7dc2cd1d571c256d38237ebc9590

  • SHA256

    0bed782633acafd96d1242d8a06017fa41ba578d75923289aa9cd199f6bed331

  • SHA512

    d158c03db11832d8ac38adc5f74c2210aef29f23655672790eba397d16417aa38e3869afee4622f4f41a2313f1113d7e8b705e832a1804f280003ced8ef155f5

  • SSDEEP

    98304:XRQVc3L+f4gjoC6mSH2GRhZqH/7rJxVV3fjpr:h7bzgjn6mxtTVrVPjt

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2