General
- Target 25b01c01be6785c8779e7a68dbbc002e1228dda16874aad8f552b39f63cb2bea
- Size 802KB
- Sample260326-m2wc2sgv9t
- SHA256 25b01c01be6785c8779e7a68dbbc002e1228dda16874aad8f552b39f63cb2bea
- MD5 4ef83bf51ae6dd5861d78e56dd25ce42
- SHA1 14b619f8a1e8fda9062f0ecdaaf37d12e5be9fd0
- SHA512 c14dec81372cc9f93e13237e79dfdfafd3971a2250b23843f67012672301744bf21f1a1a23ae182acc37d73ba66fce8bfba6e9bc2871172f06bc078bd486e4b1
- SSDEEP 12288:vKtrEjLmF/l8oBimvYPD1FlsAYtLJp3tPBU3QEQWJ9Ts4HaSv4MehIPViF2cMFqe:ytruAl8oBi
- TLSH T13505999D765071DFC86BC972CEA82C64FA6074BB931B9207901315EDAE0D99BDF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
25b01c01be6785c8779e7a68dbbc002e1228dda16874aad8f552b39f63cb2bea.exe
Resource
win10v2004-20260129-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 25b01c01be6785c8779e7a68dbbc002e1228dda16874aad8f552b39f63cb2bea
- Size 802KB
- SHA256 25b01c01be6785c8779e7a68dbbc002e1228dda16874aad8f552b39f63cb2bea
- MD5 4ef83bf51ae6dd5861d78e56dd25ce42
- SHA1 14b619f8a1e8fda9062f0ecdaaf37d12e5be9fd0
- SHA512 c14dec81372cc9f93e13237e79dfdfafd3971a2250b23843f67012672301744bf21f1a1a23ae182acc37d73ba66fce8bfba6e9bc2871172f06bc078bd486e4b1
- SSDEEP 12288:vKtrEjLmF/l8oBimvYPD1FlsAYtLJp3tPBU3QEQWJ9Ts4HaSv4MehIPViF2cMFqe:ytruAl8oBi
- TLSH T13505999D765071DFC86BC972CEA82C64FA6074BB931B9207901315EDAE0D99BDF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects the C# variant of RisePro Stealer
-
Risepro family
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1