Extracted

• • Target

    f8cab6caf628358fc3b3d83894de27c7b466dc48110f0bc9b8e257caa769021f

  • Size

    5.0MB

  • MD5

    d9d1ee7544552603da07ff2f1012cdeb

  • SHA1

    09d4be8bb431a63719301917660950e80661aa18

  • SHA256

    f8cab6caf628358fc3b3d83894de27c7b466dc48110f0bc9b8e257caa769021f

  • SHA512

    c34258255a74ce37109e6428d491b99a6e35c0e70d14031ae6bb47d05bc602e6da5b4f08164e4e7a0e8626a88604cd07028c7811d42fa4b938b6d6ce6e6d5e9f

  • SSDEEP

    98304:k19lk9KAL2sh9JW9RLJw5WcDMF+VAUq2TNrgThtq7vNOlvn:alAqs4nLsbOUAUq2ZgyJUP

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2