General

  • Target

    1996-3-0x0000000000050000-0x0000000000BB9000-memory.dmp

  • Size

    11.4MB

  • MD5

    13ef922c7996c04dc1aa9a47aa0974c2

  • SHA1

    d74bd717e32c048ea2f160158c0b026585a0a329

  • SHA256

    937471a06e023c790217875125ac45be16d56a27d0efe03775ef929b0676fc0a

  • SHA512

    0927ef3ff57646bc35d4358b4d5f5dd0109c7dd7cdcdfed96905bf529798956213f7c6aa4d9dde5e03a64c578e637e429b8f52813c3c842f6575823fb327b046

  • SSDEEP

    196608:sZ6kyZyjyQw9gIEgScfga1fBcFRtvwBo3xxyXCM5CbQ230g:c6k/A9lSAZwTvzOF5Ch

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1996-3-0x0000000000050000-0x0000000000BB9000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections