Analysis

  • max time kernel
    139s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-06-2024 18:04

General

  • Target

    708-3-0x00000000007B0000-0x0000000000DA0000-memory.exe

  • Size

    5.9MB

  • MD5

    da68817cab43d7f471899a34b0f4a6de

  • SHA1

    5e1798bf308f68fc5d461fa5780a93480334198f

  • SHA256

    5fc22b92f8178adba248b20585f64c6446ec8c23eaa103ae688c06a2ddf3cd1c

  • SHA512

    1ab54ba3f30c49e5d2cd69a4eca4e244ec2b79122359c8bc6c76269ca3dee5b7499021dc24eb91aa468845dc640d13894638a9f3d1d4f4a666094d14e8dac5c5

  • SSDEEP

    98304:tQWjhHtH1XWnaKYQLTe5gMMgbO4/O9/IhIIxLgpe2XxNPXzwcF8uN7sS:SQHtVXca7QLTedRxkpeGbjcuR7

Score
10/10

Malware Config

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

Processes

  • C:\Users\Admin\AppData\Local\Temp\708-3-0x00000000007B0000-0x0000000000DA0000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\708-3-0x00000000007B0000-0x0000000000DA0000-memory.exe"
    1⤵
      PID:2240

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2240-0-0x00000000007B0000-0x0000000000DA0000-memory.dmp

      Filesize

      5.9MB