risepro | e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f | Triage

Sharing

General

Target

e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f
Size

2.9MB
Sample

240308-frpn7agg6x
MD5

254005323ac6e401bddf283e17a6cb7b
SHA1

2f6aee45f508fa5c96682e8a93f9201f8611bb25
SHA256

e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f
SHA512

21fa26a1a2df2d43661eca7fb854d8afd98d318da6433d157190a0bc2ee79490e5c249855017eef36bcce857882c3ae96fcd24eab0ae8209663703e9ed56c666
SSDEEP

49152:zHR5sQ4fSAn8bmnf7N1GkIkDtjuk+PPDTT9XJhTgI/tOc/X1nsg9oZkozdFT:D2fSpbmnfIk3QPDTZXbkSCg9ElxF

Score

10^/10

risepro stealer

Malware Config

Extracted

Family

risepro

C2

193.233.132.62

Targets

- Target
  
  e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f
- Size
  
  2.9MB
- MD5
  
  254005323ac6e401bddf283e17a6cb7b
- SHA1
  
  2f6aee45f508fa5c96682e8a93f9201f8611bb25
- SHA256
  
  e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f
- SHA512
  
  21fa26a1a2df2d43661eca7fb854d8afd98d318da6433d157190a0bc2ee79490e5c249855017eef36bcce857882c3ae96fcd24eab0ae8209663703e9ed56c666
- SSDEEP
  
  49152:zHR5sQ4fSAn8bmnf7N1GkIkDtjuk+PPDTT9XJhTgI/tOc/X1nsg9oZkozdFT:D2fSpbmnfIk3QPDTZXbkSCg9ElxF
Score

10^/10

risepro stealer
- RisePro
  RisePro stealer is an infostealer distributed by PrivateLoader.
  stealer risepro
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2