General

  • Target

    853d4e1eb5f5cd8978eb8cc1a50475c1182119c970cf7a0b1a9078b7c9ac9def

  • Size

    3.2MB

  • Sample

    231117-vgqwtsbd53

  • MD5

    4e93404ea594b73f8ab0097400bf8319

  • SHA1

    ec0b605e21453b85332f91afc3c007b4ee455433

  • SHA256

    853d4e1eb5f5cd8978eb8cc1a50475c1182119c970cf7a0b1a9078b7c9ac9def

  • SHA512

    ab49d0a061ccf507f501bfebe84d1201bce01c2ccad3e6c9741883b530084b5ce4c4a4a3599c2038e87d812b5875f114332793e9485950f0700bf209ecf3002f

  • SSDEEP

    49152:IMbwMc13tn/rx+h6a3vHA3sYBQcxTaKOwyq+0nR9CB1:Lux+ovZNyd0nR9Cr

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      853d4e1eb5f5cd8978eb8cc1a50475c1182119c970cf7a0b1a9078b7c9ac9def

    • Size

      3.2MB

    • MD5

      4e93404ea594b73f8ab0097400bf8319

    • SHA1

      ec0b605e21453b85332f91afc3c007b4ee455433

    • SHA256

      853d4e1eb5f5cd8978eb8cc1a50475c1182119c970cf7a0b1a9078b7c9ac9def

    • SHA512

      ab49d0a061ccf507f501bfebe84d1201bce01c2ccad3e6c9741883b530084b5ce4c4a4a3599c2038e87d812b5875f114332793e9485950f0700bf209ecf3002f

    • SSDEEP

      49152:IMbwMc13tn/rx+h6a3vHA3sYBQcxTaKOwyq+0nR9CB1:Lux+ovZNyd0nR9Cr

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks