General

  • Target

    2336-3-0x0000000000D80000-0x0000000001384000-memory.dmp

  • Size

    6.0MB

  • MD5

    ab14494bb96801f2008dcd6fcb57acb5

  • SHA1

    2952204b71ae36c7b01269c06d5f8d0af0a54a11

  • SHA256

    8aa5f18104192e37063426927111c4aa900175b7858f26cf4aee69df49353d3b

  • SHA512

    89a5a8af615524592618c275eebccf3e541d3618a507b089c6d4b29cb90887caa332c2d28f31d948e865e196a3fef1b136d3ea166b8e9ac535b9838d5edb1962

  • SSDEEP

    98304:ZnD4x1jTc8gmjtOQL0GuxlJlgHefnaZtsR1DH9lcxYn4:RS1jw87jkQL0G08691jXO

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2336-3-0x0000000000D80000-0x0000000001384000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections