risepro | 097816afdf1cae4433b3f50b5d43a2dc9364fd528dd3abfcd181067b8bb1bba1

Analysis

max time kernel
139s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
21-06-2024 12:33

Target

860-115-0x00000000003B0000-0x00000000009A7000-memory.exe
Size

6.0MB
MD5

d5a746ff0b6a6732c7fa907245a6bf42
SHA1

c6e0cee72fbab408fd26bf9066f5bd882a40f622
SHA256

097816afdf1cae4433b3f50b5d43a2dc9364fd528dd3abfcd181067b8bb1bba1
SHA512

8a214b041a50fd26399673f75d602cd9c15a7c3a8d1e7111b51a7a1e4d5ed5b9ad75963d5b05b3846a6a38b7d0e656c7ea89f3a39e7ae5ba6a6a1b9f46132fa1
SSDEEP

98304:Q54jVHtHpXQTm7sQLMeWthltYg74wgSxmyYMzFkCIYrO2Ri8GJ4fl:iSHtJXGmQQLMev3mk/wO2Yuf

Score

10^/10

risepro stealer

RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
stealer risepro

C:\Users\Admin\AppData\Local\Temp\860-115-0x00000000003B0000-0x00000000009A7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\860-115-0x00000000003B0000-0x00000000009A7000-memory.exe"
1⤵
PID:792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2736,i,5229431749694857451,16836185654682871752,262144 --variations-seed-version --mojo-platform-channel-handle=1304 /prefetch:8
1⤵
PID:4760

memory/792-0-0x00000000003B0000-0x00000000009A7000-memory.dmp

Filesize
6.0MB

Download