Extracted

• • Target

    ba9bd007b31dba128de4df3df10e3acf7a35edd540e0f52642cba64da959d3b4

  • Size

    4.6MB

  • MD5

    aa90b9a1f2f099c40c9ea61e4cd8e66a

  • SHA1

    4099adbe87554bd7d24d047167f9fe8735a9eb0c

  • SHA256

    ba9bd007b31dba128de4df3df10e3acf7a35edd540e0f52642cba64da959d3b4

  • SHA512

    646f367248ee63d4bc60164d692456e8b17a8fd61a241230c9ae7102ca69f553886f76646cbc103865410dcde1902c4ea1b92e5cc5b648844431ef8f9594e5c2

  • SSDEEP

    98304:pnawVBsVpt+BFO7eB9kNKuxXBHXYy4OnYNZzPkY0oOHNBZkOlP:pnaoBsh5+yHOPkYT+ZkUP

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2