Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp.exe

  • Size

    1.8MB

  • Sample

    240107-xsgteacabk

  • MD5

    d000f10b5ea1c66dd2f38b437552efae

  • SHA1

    22062740762977633d2678dbea3229a48e32b963

  • SHA256

    c8036552ee5aa9ce1c45475a550bb73c67a4b767befc158d4e5212aab67aaf94

  • SHA512

    610c14866abdf3a0a0de239153c8a9462788ad49068d3e2808f44ace359986e87194de4349312748144b063e3dafa4a54451cb14f6afe09211512ca8fa57a03c

  • SSDEEP

    49152:+TlZwnfq/SDr6pcUQwmwtxIWVKLtZOaDsEmvO6eyR:+Tl+niaDr2cUQwmcEZtxYOLo

Score
10/10
riseprostealer

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Targets

    • Target

      tmp.exe

    • Size

      1.8MB

    • MD5

      d000f10b5ea1c66dd2f38b437552efae

    • SHA1

      22062740762977633d2678dbea3229a48e32b963

    • SHA256

      c8036552ee5aa9ce1c45475a550bb73c67a4b767befc158d4e5212aab67aaf94

    • SHA512

      610c14866abdf3a0a0de239153c8a9462788ad49068d3e2808f44ace359986e87194de4349312748144b063e3dafa4a54451cb14f6afe09211512ca8fa57a03c

    • SSDEEP

      49152:+TlZwnfq/SDr6pcUQwmwtxIWVKLtZOaDsEmvO6eyR:+Tl+niaDr2cUQwmcEZtxYOLo

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks