Analysis
-
max time kernel
141s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25-07-2024 00:41
General
-
Target
LisectAVT_2403002A_464.exe
-
Size
5.4MB
-
MD5
87c9aecd5886c99434358b6a7f42fde0
-
SHA1
a1424fb0f5bb9fb49a8797c4c43a7b8a4511b2cc
-
SHA256
6c0274f44ac55e0619f215604d918e9764ab221e08f2432cd08e65ac69d65652
-
SHA512
10086695bd697a181f694949846178ea195ba3e0b44eed39aa054110448bcdfddd8bce6cfaf1e7d9476d017425e9b6c3ba7c8d6b76bb0597cee2b0294dc9c2c9
-
SSDEEP
98304:B9jwL5kme5BYsmXZp9i/OcQItBftG3w+CdnFs/djCfnqg3mePCCFE:B1aime8L0mI7fpjnFsfahPv
Score
10/10
Malware Config
Extracted
Family
risepro
C2
193.233.132.109:50500
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LisectAVT_2403002A_464.exe"C:\Users\Admin\AppData\Local\Temp\LisectAVT_2403002A_464.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.5MB
-
Filesize
2.9MB