Extracted

• • Target

    eef9d254325690949fd1f90d726d8c2a8e26ac0ec94d041f59975fef421c9213

  • Size

    3.3MB

  • MD5

    b86520527b720e2014da9aa3862138e8

  • SHA1

    dca10f75441c01a93bbcab66a794e52a5d1afb4d

  • SHA256

    eef9d254325690949fd1f90d726d8c2a8e26ac0ec94d041f59975fef421c9213

  • SHA512

    5ffbae011add3877be2d24b5ff3882a75f6143e7ba1fa756249b3f0cfa3c571afe0700f4a8c16ff0e73f6b68e795753284794c65fb9088ccf5e48135f6782b0e

  • SSDEEP

    49152:7hqFV4p8nd27jDirr0bLcZ9UHiYHWXmhk6UqqwkcfaL65JF805ximHcR0k:7Si8o7j+MbLeOHMgUzwkIPWEHoD

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2