General

  • Target

    Photoshop-beta-crack.zip

  • Size

    34.6MB

  • Sample

    231231-sfbpeagfer

  • MD5

    c1a0320ef207afd6b3cab9cea4d8a349

  • SHA1

    f6408867826308a413cbbbcdacb39d08758bd82f

  • SHA256

    f7a518625499f2be5eaa851982ec10adcc449ffad3854d81a4f1386c6c34df94

  • SHA512

    e72057515beb7ce49ecac5876563e8ba108d0efe0ad95152c0e27f3af665259c581800d1569921481674615affd9790b76e1638ca3af452c1550fac3cab32403

  • SSDEEP

    786432:bNQicitIg64Ouvr/gBpxf/EwztGlaYABeVqc1vlsZU65BY//6Wk:bSPinOzhUctGlweVX1vledHz

Malware Config

Extracted

Family

risepro

C2

193.233.255.91

Targets

    • Target

      Language/WinRar.exe

    • Size

      3.2MB

    • MD5

      b66dec691784f00061bc43e62030c343

    • SHA1

      779d947d41efafc2995878e56e213411de8fb4cf

    • SHA256

      26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370

    • SHA512

      6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3

    • SSDEEP

      98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8

    Score
    1/10
    • Target

      Photoshop-beta-crack.exe

    • Size

      58.2MB

    • MD5

      eaa91e08d8ad9385a08bc9e31f7d683c

    • SHA1

      8f0326f98fb2edd1b4f0c11ce8cc6edd1bcd935b

    • SHA256

      2d0b685eeb9a5e23b50b9e88ccc6d9aa53ca2fc1e935f30dec40c170f20fac70

    • SHA512

      475699b63078596f7953791a7ce63859e293d83a6bcd33ded49630169fc1beba1a56e13e5e733e008ff13929e915c3991a1b5f0642592ca302fee04bd81e39db

    • SSDEEP

      393216:UcZDIFlplNv+n9hep/9D9lpAJCHkgzZVlWwo5NdL8ae5+:GlpEM/9D9A0HkgzZVpo5X3s+

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Creates new service(s)

    • Stops running service(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      opengl32.dll

    • Size

      36.0MB

    • MD5

      ca1aaaccc6f19ccd74a48eea51c03338

    • SHA1

      c0ca48ab85406b6a98761a212c3e5fde92ada7ec

    • SHA256

      d109ab0e8f7aa6f00992368b72c9a8aa0cf6d1b1563c3ab1caedbdba9c4476ba

    • SHA512

      8bf7382fdc59649a1b44107d4289a8ea898f19c2addb3d5fc87a1c60baa667abac359d084829b552b391456613a0e3273a64d3d2464d780cc1d7d6ef5c204a31

    • SSDEEP

      393216:LoT0RoCZueyqN9LB2xmcR+hcoPwdyzjpECaT0UMPbGLsXT4El/uRKgI9v/2OlJ/I:84vb0GmnI9NX0

    Score
    1/10
    • Target

      vcruntime140.dll

    • Size

      94KB

    • MD5

      11d9ac94e8cb17bd23dea89f8e757f18

    • SHA1

      d4fb80a512486821ad320c4fd67abcae63005158

    • SHA256

      e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e

    • SHA512

      aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778

    • SSDEEP

      1536:yDHLG4SsAzAvadZw+1Hcx8uIYNUzUnHg4becbK/zJrCT:yDrfZ+jPYNznHg4becbK/Fr

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks