Extracted

• • Target

    aba1c8fba6ba30a4e6eede87aa7389973c46a0bc4858e61f16adf8d897dbbeb3

  • Size

    4.8MB

  • MD5

    5e7421d0b0003ff5e1ee344e83888521

  • SHA1

    29c844e3af587b6d453ee210c983ab510c98eefe

  • SHA256

    aba1c8fba6ba30a4e6eede87aa7389973c46a0bc4858e61f16adf8d897dbbeb3

  • SHA512

    4a4eb630da09d0b7c8bdd91b89469bcf1d1b2cd55be80e8a79e9f904515836ecd8a301f791ca236cd3972738163e3ff006d4a0d2201d1cbc650acabab6919306

  • SSDEEP

    98304:O5kGftjf698S8BkSfs2jMpUTYjv/MJbfGeAkwgOlL3:EkGljAnoMpUTav0JjGeAWUz

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2