General

  • Target

    297564c2c30054094a3251adb7e004a6c4900553815bf52e94bfd4e961dc0197

  • Size

    3.2MB

  • Sample

    231117-ts2xssca2x

  • MD5

    3a1d57342efaf8b0dcb3dc99f0c857d6

  • SHA1

    393365f9a540f73062a4e019cfe1608459625ec8

  • SHA256

    297564c2c30054094a3251adb7e004a6c4900553815bf52e94bfd4e961dc0197

  • SHA512

    475508cd088f9018539bf76fda58aea6f9dd16b690fd48d057b1f314fa6b881a64fb0d5b5f381dee05d9fbc07ec1794babdc26dc7187e76f0887f3808a16d2a9

  • SSDEEP

    49152:jp+jMc13tn/Ge86a3vHPFjQToNrHOC9Us9/cFt:Aie7SaTyrudYkFt

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      297564c2c30054094a3251adb7e004a6c4900553815bf52e94bfd4e961dc0197

    • Size

      3.2MB

    • MD5

      3a1d57342efaf8b0dcb3dc99f0c857d6

    • SHA1

      393365f9a540f73062a4e019cfe1608459625ec8

    • SHA256

      297564c2c30054094a3251adb7e004a6c4900553815bf52e94bfd4e961dc0197

    • SHA512

      475508cd088f9018539bf76fda58aea6f9dd16b690fd48d057b1f314fa6b881a64fb0d5b5f381dee05d9fbc07ec1794babdc26dc7187e76f0887f3808a16d2a9

    • SSDEEP

      49152:jp+jMc13tn/Ge86a3vHPFjQToNrHOC9Us9/cFt:Aie7SaTyrudYkFt

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks