Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27-06-2024 09:46
Behavioral task
behavioral1
Sample
risepro_2.exe
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
risepro_2.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
risepro_2.exe
-
Size
1.3MB
-
MD5
b2ccacb6bd2fbe987264540ecd2bbe86
-
SHA1
4ad0e6913ad4090100e033529c30e5436ee567de
-
SHA256
b0e194ed54bafa753bda5761c1264b67a5c438ee7a9ed624a83be913f037dcbb
-
SHA512
904008e4b5de6e2919f002c3f091260b9752cdfadc7516ebf78184191ab72aab03838305e919042f7b71ef97d63663bd191bf65b5fd84781587db93908224f56
-
SSDEEP
24576:qKADNTT6CXbGp7KEDDUTgohEZxULtoI/297bTKun/z0Vr:wDNn6CCVZitoI/2tTl/z0Vr
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4844 680 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\risepro_2.exe"C:\Users\Admin\AppData\Local\Temp\risepro_2.exe"1⤵PID:680
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 680 -s 5562⤵
- Program crash
PID:4844
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 680 -ip 6801⤵PID:1968