General

  • Target

    good.exe

  • Size

    1.6MB

  • MD5

    39a1a7a3b5743f95401cd880dcf92541

  • SHA1

    069601d8f13b55c3c48a6680f8eea01500cc579c

  • SHA256

    2e3df0155be35b28607c17d3564467028167507a2ab007af9644e884a24e3f03

  • SHA512

    78c86daed3af67371dd21a33e82bfbb5028ae8ec5f6b298eff2a0e7965dc81cf4dfd9d781cf0c05a531dbdbf142b9057f005e3cccd3813c10bbb16d893acd9c5

  • SSDEEP

    49152:qWg8wUmZOzqiavjDUJO/WH89ctcO0ljbbQnIQGotBKqy8TJCHEGU42sn6:ZiUmZOzqiavjDUM/WH89y8bboGO

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.51

Signatures

  • Privateloader family
  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • good.exe
    .exe windows:6 windows x86 arch:x86

    a391c991ba6330d6ddb5beaa15ef064c


    Headers

    Imports

    Sections