Extracted

• • Target

    AdaptorOvernight.exe

  • Size

    25.0MB

  • MD5

    e0d29de6e2fa7590f857f1ef825c943c

  • SHA1

    5d4166175a6aeadad97a01f856856cc87a482311

  • SHA256

    47fa886618e66e730a11f7a37be8ab0371709624a0ad26e7370c0220bdd4786d

  • SHA512

    190c08889a5085bc38d8cc8689eb6dc461338f80496cda05068b20940053a4df6330a35ae651c8cdc325e090a87b5b097dfae7ead64d39dda3cca1a03fedba5e

  • SSDEEP

    49152:Ix1BZ/3KMJESGkP9bKJPUyN1RL7HDUq1373htq:+bZ/6JSGkPRwPU2R3Q63hM

  Score

  10^/10

  riseprodiscoverystealer

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Drops file in System32 directory

  • Enumerates processes with tasklist

    discovery

  • Suspicious use of SetThreadContext

  behavioral1