General

  • Target

    ff2177c078dfed4b10a0214acefabf09b691a831479b06866e1d35e1a144cb3e_JC.exe

  • Size

    2.2MB

  • Sample

    231011-naz3laaf9y

  • MD5

    4df9fa7cef7bd7e19456e219b135ae69

  • SHA1

    d888b914ad9fcfe4f396b87c9502030597bd8272

  • SHA256

    ff2177c078dfed4b10a0214acefabf09b691a831479b06866e1d35e1a144cb3e

  • SHA512

    8de121b7faef85c38395d46b4ba7164930ded228bfbd5262acd086f4f2adf1e938bb7d4e900e4823aa4c48c227f9c94740dfa2b51101b305426d59d90014838e

  • SSDEEP

    49152:zUKO7dGzmpBlGEhAOh+X/3DGAZ6RFTuuEzP35ZrWVnNnOIcYAZZPum28uv2:QKOImpaK5sXvDWcuEznrWV5XcFPZ02

Malware Config

Extracted

Family

risepro

C2

95.214.25.235

Targets

    • Target

      ff2177c078dfed4b10a0214acefabf09b691a831479b06866e1d35e1a144cb3e_JC.exe

    • Size

      2.2MB

    • MD5

      4df9fa7cef7bd7e19456e219b135ae69

    • SHA1

      d888b914ad9fcfe4f396b87c9502030597bd8272

    • SHA256

      ff2177c078dfed4b10a0214acefabf09b691a831479b06866e1d35e1a144cb3e

    • SHA512

      8de121b7faef85c38395d46b4ba7164930ded228bfbd5262acd086f4f2adf1e938bb7d4e900e4823aa4c48c227f9c94740dfa2b51101b305426d59d90014838e

    • SSDEEP

      49152:zUKO7dGzmpBlGEhAOh+X/3DGAZ6RFTuuEzP35ZrWVnNnOIcYAZZPum28uv2:QKOImpaK5sXvDWcuEznrWV5XcFPZ02

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks