Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0009000000022bd2-12.dat

  • Size

    1.3MB

  • Sample

    231126-2b89jscf91

  • MD5

    2844efe0844c9380019625b729e7f72f

  • SHA1

    efb02fccd42e9e67bbce543049baf15df64952de

  • SHA256

    527a39d90a1b75475beeee91fe24da641b4e52f7403d0e73beba6cfa619ca0b1

  • SHA512

    1da5ed9cf2c144558d6eb4c725358092c53e2e5c16a799b9ede1690e9c1a8579fb9eed0484849b29e8ad1ad4c50f4892415d6ad04ade6c3c909eb09372c2b580

  • SSDEEP

    24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      0x0009000000022bd2-12.dat

    • Size

      1.3MB

    • MD5

      2844efe0844c9380019625b729e7f72f

    • SHA1

      efb02fccd42e9e67bbce543049baf15df64952de

    • SHA256

      527a39d90a1b75475beeee91fe24da641b4e52f7403d0e73beba6cfa619ca0b1

    • SHA512

      1da5ed9cf2c144558d6eb4c725358092c53e2e5c16a799b9ede1690e9c1a8579fb9eed0484849b29e8ad1ad4c50f4892415d6ad04ade6c3c909eb09372c2b580

    • SSDEEP

      24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks