Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5881289da3e68d188d0e364d74a106a06090f089d291ea0a78593393fbbcca42

  • Size

    1.9MB

  • Sample

    231124-n8aklaae35

  • MD5

    7210bd02fd49b470969bc191ff2f3dca

  • SHA1

    1e2d9e7737ad238b3ab68ef6aed7b85ad51ac468

  • SHA256

    5881289da3e68d188d0e364d74a106a06090f089d291ea0a78593393fbbcca42

  • SHA512

    d0b6c15d5affe1dd44bb1bf12a2efa93dc5620a694e712c7f4ce7666ae684df93110a4c3236c5339ca09537150de91d43d28926032cbdc970293dd57012e8c18

  • SSDEEP

    24576:nylMiMR7lqzeL2LiULBMw256+SCzB0lY00y7QFZFHDkDMidx9UMP3B1yQzKE:yl4RBqyftwk62dPMDMcxV/yQK

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      5881289da3e68d188d0e364d74a106a06090f089d291ea0a78593393fbbcca42

    • Size

      1.9MB

    • MD5

      7210bd02fd49b470969bc191ff2f3dca

    • SHA1

      1e2d9e7737ad238b3ab68ef6aed7b85ad51ac468

    • SHA256

      5881289da3e68d188d0e364d74a106a06090f089d291ea0a78593393fbbcca42

    • SHA512

      d0b6c15d5affe1dd44bb1bf12a2efa93dc5620a694e712c7f4ce7666ae684df93110a4c3236c5339ca09537150de91d43d28926032cbdc970293dd57012e8c18

    • SSDEEP

      24576:nylMiMR7lqzeL2LiULBMw256+SCzB0lY00y7QFZFHDkDMidx9UMP3B1yQzKE:yl4RBqyftwk62dPMDMcxV/yQK

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks