General

  • Target

    e920581589e8d9dfee92d78c904611c3aa398dde74464759d6968acaa5acaacf

  • Size

    3.2MB

  • Sample

    231117-p6dpxahe89

  • MD5

    b354c0fe17a926137e2c1d54f3b5c489

  • SHA1

    a6bb0943d57980ea6e7b7fd0f685138819ed80a0

  • SHA256

    e920581589e8d9dfee92d78c904611c3aa398dde74464759d6968acaa5acaacf

  • SHA512

    b198d737b4134ad789866002e4dea97d75dc9c9586d72097d5755f8c6eae8401501d7b338df3173dcd9f006e580dbe546211559cd5722c9ee140648d6b50dad3

  • SSDEEP

    49152:sMbwMc13tn/rx+h6a3vHNh9nspVlp1WHazasbPsJaYNuiZ1:3ux+o8nKb7WHazasbPTYr

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      e920581589e8d9dfee92d78c904611c3aa398dde74464759d6968acaa5acaacf

    • Size

      3.2MB

    • MD5

      b354c0fe17a926137e2c1d54f3b5c489

    • SHA1

      a6bb0943d57980ea6e7b7fd0f685138819ed80a0

    • SHA256

      e920581589e8d9dfee92d78c904611c3aa398dde74464759d6968acaa5acaacf

    • SHA512

      b198d737b4134ad789866002e4dea97d75dc9c9586d72097d5755f8c6eae8401501d7b338df3173dcd9f006e580dbe546211559cd5722c9ee140648d6b50dad3

    • SSDEEP

      49152:sMbwMc13tn/rx+h6a3vHNh9nspVlp1WHazasbPsJaYNuiZ1:3ux+o8nKb7WHazasbPTYr

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks