Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1b21408f314ad536d859e7a7ebf287686e741c537f81733f54d4fc42b8bf2e24

  • Size

    1.9MB

  • Sample

    231124-fhgl8afe89

  • MD5

    746ba6c2513d1948d307ceca26f9c8dd

  • SHA1

    b655245547d4ec12c9a3af9fdf1674e64ae9639d

  • SHA256

    1b21408f314ad536d859e7a7ebf287686e741c537f81733f54d4fc42b8bf2e24

  • SHA512

    f8adbabf59c5deadc4531dd3aa4a0d5afe647e60e07b64b5703f455445f763302f37a3871cb4d483f3c72908a7e8eee8aab7aee0b61a0bcfa703d3d2d4a6fa4c

  • SSDEEP

    49152:Pgpb+wvayVjPN6wXmH2KEopVv/pe9z7wsyqVOZq6Zjj:6VBdmH2ZWVI9z7wsyq8Zq

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      1b21408f314ad536d859e7a7ebf287686e741c537f81733f54d4fc42b8bf2e24

    • Size

      1.9MB

    • MD5

      746ba6c2513d1948d307ceca26f9c8dd

    • SHA1

      b655245547d4ec12c9a3af9fdf1674e64ae9639d

    • SHA256

      1b21408f314ad536d859e7a7ebf287686e741c537f81733f54d4fc42b8bf2e24

    • SHA512

      f8adbabf59c5deadc4531dd3aa4a0d5afe647e60e07b64b5703f455445f763302f37a3871cb4d483f3c72908a7e8eee8aab7aee0b61a0bcfa703d3d2d4a6fa4c

    • SSDEEP

      49152:Pgpb+wvayVjPN6wXmH2KEopVv/pe9z7wsyqVOZq6Zjj:6VBdmH2ZWVI9z7wsyq8Zq

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks