Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a41a9796143c1b66536d9b2966b0ad42a2fa1325b9177522d45685ded29fc25f.exe

  • Size

    1.5MB

  • Sample

    231127-v4yvysah83

  • MD5

    764fb09b4fb31924e3cd1d4074ab2cba

  • SHA1

    e70b07e83182f4931dc9d506aaf09aa981633fae

  • SHA256

    a41a9796143c1b66536d9b2966b0ad42a2fa1325b9177522d45685ded29fc25f

  • SHA512

    e73899f57427b85e77b8bd1e35591d2b84e4d0d929488fcc27aa42be6c469ef7debc455025d741141457471023390267b4a4adbbb35c1073c13ab4aa13a9007b

  • SSDEEP

    24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      a41a9796143c1b66536d9b2966b0ad42a2fa1325b9177522d45685ded29fc25f.exe

    • Size

      1.5MB

    • MD5

      764fb09b4fb31924e3cd1d4074ab2cba

    • SHA1

      e70b07e83182f4931dc9d506aaf09aa981633fae

    • SHA256

      a41a9796143c1b66536d9b2966b0ad42a2fa1325b9177522d45685ded29fc25f

    • SHA512

      e73899f57427b85e77b8bd1e35591d2b84e4d0d929488fcc27aa42be6c469ef7debc455025d741141457471023390267b4a4adbbb35c1073c13ab4aa13a9007b

    • SSDEEP

      24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks