General

  • Target

    6748-24000-0x0000000000C00000-0x0000000001132000-memory.dmp

  • Size

    5.2MB

  • MD5

    15f099947a6fcab489eba0453fc7ccdf

  • SHA1

    0fa559dfcc9674a514b2e202cd80390f7828df9d

  • SHA256

    1dcdd9ed8beb88b7574353eae92ada047d26d0f20d064ef230e364e25b17afc0

  • SHA512

    aa876985ce3afeea302bc0e6be67b40ed27b444cc93d07c5ff3c48ca5a9c50a9ee201b305e42802a7e1876748b1c99161199be589a3cc7db2b4c3036b721cde2

  • SSDEEP

    98304:4TCgpFzjE0Z3rs1QLiyBGKPgNgZrQ8q4VtRTafn:8/Fz40drwQLiyBGKYNgBqqBU

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6748-24000-0x0000000000C00000-0x0000000001132000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections