Extracted

• • Target

    57ebb357d0760839b7de05f1950bc02738328ef70ea770689b34dc161c2fe4a3

  • Size

    3.4MB

  • MD5

    45a76fb9be4b4778e5880d2a8e41e197

  • SHA1

    50053b17a0a255f9c17c6e51a19aaf6f6dd93584

  • SHA256

    57ebb357d0760839b7de05f1950bc02738328ef70ea770689b34dc161c2fe4a3

  • SHA512

    085965e8c6d5dea6002e8baad8a959c2ca4385a3db4709e575301283164315020bb6aa694bbcadc1297b61d63c3abf6f909f17f811a6190fa8ddcc5de8f59bcf

  • SSDEEP

    98304:Pm6JSwzBrMyM0bS1pw0ixx1MLyTseQncDUzP:Pm6J9BOfw0fyAc4P

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2