Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000022e10-24.dat

  • Size

    1.3MB

  • Sample

    231120-3jmk7abe3v

  • MD5

    b19b2c0fe7352d6e80d84731776db99c

  • SHA1

    9d9bbed67707db967160469cc559e8930ef5b391

  • SHA256

    9ff47a7a5559666838f9ceccd055f87558a782237225fffd067b790a5282bcf8

  • SHA512

    58fe7cba113268ef3ec72065494d5049936294b089bd1fd160651618b3b41a48ee5a7ccefea7519efc3246c1fec47036110f77d714fffa95a2892de0bb3bbb53

  • SSDEEP

    24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      0x0006000000022e10-24.dat

    • Size

      1.3MB

    • MD5

      b19b2c0fe7352d6e80d84731776db99c

    • SHA1

      9d9bbed67707db967160469cc559e8930ef5b391

    • SHA256

      9ff47a7a5559666838f9ceccd055f87558a782237225fffd067b790a5282bcf8

    • SHA512

      58fe7cba113268ef3ec72065494d5049936294b089bd1fd160651618b3b41a48ee5a7ccefea7519efc3246c1fec47036110f77d714fffa95a2892de0bb3bbb53

    • SSDEEP

      24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks