General

  • Target

    SecuriteInfo.com.Trojan.Siggen23.22903.27680.19534.exe

  • Size

    1.4MB

  • MD5

    099556734bde76d46c677c726cbf2538

  • SHA1

    e2e80cd64fdba773aba28913365f837d7ff39e48

  • SHA256

    ccf9ab5f39684f978982e061fe87aacf71bca2b411f8a6e55d776bdc032b36d7

  • SHA512

    a54f32025f391b9fb1842268c5d3ace13d8b473fcbc85b4465563c520a782e2f54be8f549c1bbf7dd93d92c138def919f1a1c9257dc5377e0d388f25a052bb6a

  • SSDEEP

    24576:nUalkVcJGB7FyCTEaYtT9SfVK5Y3IexDzSf3Z8MQQvTICTNioPUXl7TP8o1Cl8:nyWJG7yUVYtT8RSPKqvTVTHs9TP8o1Cm

Score
10/10

Malware Config

Extracted

Family

risepro

C2

193.233.132.62:50500

Signatures

  • Risepro family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.Trojan.Siggen23.22903.27680.19534.exe
    .exe windows:6 windows x86 arch:x86

    96fa9927288c4f8325d3528d85326fb2


    Headers

    Imports

    Sections