General
- Target xtra.exe
- Size 1.2MB
- Sample240122-yhhtdscffj
- SHA256 fcedfc42e2a17d6d74c16cd7432f890cc5145a01f2018533cd519b1e215ea1b1
- MD5 33e56c1ec2795fd845e8a01b90533156
- SHA1 9867e4061d691fd665db9ec7c25706045991569d
- SHA512 ffb6ce0763e129cfd79e44766dfc668e394819a11c2dcc81a16d35ba2f713704876731f0e35b01a14a96ddd2c7dbec11a359f9530afde3ff6de3f94635919d40
- SSDEEP 24576:gTGpDMaiApcl1a3OUHNDEMqUmMYwQpRHW/nSZaV4IcAZoI:gCSaiJl1UOeNDEomPlpR2/SZm4IcLI
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xtra.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
risepro
C2
-
193.233.132.62:50500
Targets
-
- Target xtra.exe
- Size 1.2MB
- SHA256 fcedfc42e2a17d6d74c16cd7432f890cc5145a01f2018533cd519b1e215ea1b1
- MD5 33e56c1ec2795fd845e8a01b90533156
- SHA1 9867e4061d691fd665db9ec7c25706045991569d
- SHA512 ffb6ce0763e129cfd79e44766dfc668e394819a11c2dcc81a16d35ba2f713704876731f0e35b01a14a96ddd2c7dbec11a359f9530afde3ff6de3f94635919d40
- SSDEEP 24576:gTGpDMaiApcl1a3OUHNDEMqUmMYwQpRHW/nSZaV4IcAZoI:gCSaiJl1UOeNDEomPlpR2/SZm4IcLI
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of NtSetInformationThreadHideFromDebugger