General

  • Target

    0x0007000000023110-19.dat

  • Size

    1.5MB

  • Sample

    231129-r19w9sha37

  • MD5

    919ffd3cd906669b19777787a472a56c

  • SHA1

    606b3b1bacf2495b121d2dbc06b7a959d2617c8e

  • SHA256

    3294690a2c73a29d8288448c83f7db92c74f68913173212975c702ce38a4df51

  • SHA512

    32c6f14618bcd22fceb058ee3942807b0d14322b277ebc1aad2609a6f81e73398033d398fcf499a922e8d85e525cda783d74488e71c249ad734bdc9e15969751

  • SSDEEP

    24576:8N+bPGUvbX8AdjI9Bahe/wz78RaiyhrbnC3OlKekN4srzEhbaLUCKWmRlsSmYTz+:8wyYjI9EheW7WaiUy3V6baLUCmRlnmYW

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      0x0007000000023110-19.dat

    • Size

      1.5MB

    • MD5

      919ffd3cd906669b19777787a472a56c

    • SHA1

      606b3b1bacf2495b121d2dbc06b7a959d2617c8e

    • SHA256

      3294690a2c73a29d8288448c83f7db92c74f68913173212975c702ce38a4df51

    • SHA512

      32c6f14618bcd22fceb058ee3942807b0d14322b277ebc1aad2609a6f81e73398033d398fcf499a922e8d85e525cda783d74488e71c249ad734bdc9e15969751

    • SSDEEP

      24576:8N+bPGUvbX8AdjI9Bahe/wz78RaiyhrbnC3OlKekN4srzEhbaLUCKWmRlsSmYTz+:8wyYjI9EheW7WaiUy3V6baLUCmRlnmYW

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks