Extracted

• • Target

    Setup.exe

  • Size

    763.9MB

  • MD5

    4bd4b45bd3794ed04f005e35fe26a1ae

  • SHA1

    af6c84972f62c82e34452bc525e6e9853d674420

  • SHA256

    20873ad9d1cec3cc30369b5efa593e53ba9cfbf1769fa919be59d6f6eea7fb1c

  • SHA512

    6aa4a0b1bfab7a9f00c1c7a5da7cd2647abcc1891041ded060c2e1e27cefd5c77e1d8072f19879c38acb2eaa055c47635559ccde03f234c2a8bcbb4ae7a914a7

  • SSDEEP

    196608:ViMcReCLHdwM5kVKqSVlMWXmam9uLepUltO7cF+d9e/nd:VhCHCokVKrzMWX7m6lkIF+did

  Score

  10^/10

  riseprocollectiondiscoveryspywarestealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2