Analysis
-
max time kernel
297s -
max time network
308s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
29-07-2024 05:06
General
-
Target
93dd47da2afc31952d4cff646bc902dd8ec3564896dc7eaf1e1c163549a787c9.exe
-
Size
6.1MB
-
MD5
b96494b51a30b3cc1a1063216058eb1c
-
SHA1
7047fcd8f168324dcd184ab501a15c4f768e361b
-
SHA256
93dd47da2afc31952d4cff646bc902dd8ec3564896dc7eaf1e1c163549a787c9
-
SHA512
a13bb12123c1fec3f1dee3df6330d3d104223a2925d25804c61e8edef77479cff7f182750c1de548c40856896be553b1f283a5ad105bd744190ba7a8902dff64
-
SSDEEP
98304:rtQVcaS/bht7bPGyRXJeMBZz5sAs5cVUH+oeHrYhpkCLBCIgMM1qJ0CO0:B6cLX/PGq4wWcVjYhpkEgM+z0
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.169
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\93dd47da2afc31952d4cff646bc902dd8ec3564896dc7eaf1e1c163549a787c9.exe"C:\Users\Admin\AppData\Local\Temp\93dd47da2afc31952d4cff646bc902dd8ec3564896dc7eaf1e1c163549a787c9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
10.2MB
-
Filesize
4KB
-
Filesize
10.2MB