General

  • Target

    ec2cdb03142e05907df86fd4aa638b33.exe

  • Size

    1.9MB

  • Sample

    231129-t1cymshg69

  • MD5

    ec2cdb03142e05907df86fd4aa638b33

  • SHA1

    a2b1fdc24ef9f8da7c95323a59d510162ea2faef

  • SHA256

    428d3eac1d6720cca1a2461153b8e39b5ac10340f458c1c5ae93d2c85cebc054

  • SHA512

    24e52dee17b1a04e56f5c9975198cec93a5117ca2e4f8b8650c7f5e1a2ab06071441358f09c30c3325ff74550a7ea969c91857375d10ece4cc1e381248ebbfdc

  • SSDEEP

    49152:cTTOJywr57GnOV+PEYDuhnmv0lZJsQc71Y0z/XV7uvc:aqGnKKMlZjcTXV7

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      ec2cdb03142e05907df86fd4aa638b33.exe

    • Size

      1.9MB

    • MD5

      ec2cdb03142e05907df86fd4aa638b33

    • SHA1

      a2b1fdc24ef9f8da7c95323a59d510162ea2faef

    • SHA256

      428d3eac1d6720cca1a2461153b8e39b5ac10340f458c1c5ae93d2c85cebc054

    • SHA512

      24e52dee17b1a04e56f5c9975198cec93a5117ca2e4f8b8650c7f5e1a2ab06071441358f09c30c3325ff74550a7ea969c91857375d10ece4cc1e381248ebbfdc

    • SSDEEP

      49152:cTTOJywr57GnOV+PEYDuhnmv0lZJsQc71Y0z/XV7uvc:aqGnKKMlZjcTXV7

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks