Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 00:46
Behavioral task
behavioral1
Sample
Risxn Pro.zip
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Risxn Pro.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
pro/Risxn Pro.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
pro/Risxn Pro.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target pro/Risxn Pro.exe
- Size 2.2MB
- Sample260809-a44e8a1wew
- SHA256 f0c607c8d473fbe1c313d605843654ec8988e81126e05ef9c503cd7c5b85090e
- MD5 68efd7a373c0e7efe0dbd844cd27da9d
- SHA1 f09ccd8874116b128b92a6646e4858ab7c8467b6
- SHA512 f535634e377d2aa086de28a5039fa3e9d89b80df9348d863b55d1156115f51d5c0d628d0b426a008b60ee16cb03b9c529aad6553def587fb9b2c403011bfd9a0
- SSDEEP 49152:oeevq5vKRKT4LzYaTzKET+QoPC0u3dtT8eABI:SRKwB6QoXdF
- TLSH T198B5D09149987CBCF99E9FF420206D3D188DAD6470BC6514C698E34E878B98CB72F49F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 5048 Risxn Pro.exe 5048 Risxn Pro.exe 5048 Risxn Pro.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5048 Risxn Pro.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\OZvhbILaZdCcz.dll
- Size 2.2MB
- SHA256 404699d11f327b63c570f2deb79d495ab215158da3d9acf263a3fdb25c3f8422
- MD5 25a9e76a588c902535d9c772b72828d5
- SHA1 53d31208babe59459823428df675e970010d694e
- SHA512 3976deaef9d13f439349d755a4faa0f69acee86e1bc8cc24bc5bc734e70ce8d5dc52d4c4a575934b70625ad31edf329c0ebc031639eaf33371345eb43425290d
- SSDEEP 49152:I2o72/i984xX58rJbmePkZv0cpXn0tempVaKqtKpu5r1BSUKSKJs9ymKtSqGJr+6:g7tKSWs9ycYI
- TLSH T16AB5CFCEF966C224DA47AB736CF4F24C777DE79A964392146805D33C1A301CE8EA81D6
- MD5 SHA1 SHA512 SSDEEP TLSH