General

  • Target

    good.exe

  • Size

    1.6MB

  • MD5

    6c106df306b74f7dbedce7233b544af7

  • SHA1

    98c739f51ff92efade108b3ac8c429b6a79217b8

  • SHA256

    5a3cd17a1459d3f530858392d276fd9a23206e4766eedda1aef8b19cedfda3d3

  • SHA512

    37b852937e7fcfd6cf63f60b40131eb26feb47a900825fd467eaca947253b031eecbd7a2062d5c588e94e02e13a57cba1a858c50d57b8f4a39ca82aed337ac5a

  • SSDEEP

    49152:qWg8wUmZOzqiavjDUJO/WH89ctcO0ljbbQnIQGotBKqy8TJCHEGU42sn6:ZiUmZOzqiavjDUM/WH89y8bboGO

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.51

Signatures

  • Privateloader family
  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • good.exe
    .exe windows:6 windows x86 arch:x86

    a391c991ba6330d6ddb5beaa15ef064c


    Headers

    Imports

    Sections