Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15/03/2024, 01:16
General
-
Target
d73bf02e574fc907ee25a373379532da515a089511755756d4792016d4c0b0da.exe
-
Size
6.7MB
-
MD5
8407c873fcadf727839152097cc54527
-
SHA1
f099abaa9012edf444401ee6a32ca2a53c12e8b7
-
SHA256
d73bf02e574fc907ee25a373379532da515a089511755756d4792016d4c0b0da
-
SHA512
c28a42f38d0ee5cbc6458da9484d89c4fc54123a24d91339724820e782c0a7b864ed1983d495dba020faa8fd8331d12a997c8dc07362d28c67d6c2b794373aac
-
SSDEEP
98304:XqPpXTGwW81gDV5JWs4ina6k0Y6wc4/Ar4ufBwzRMxs4ogNPqKvFbbDTo036EmIv:Xcq9VyQE5a4/AWzRVlkq4ZsQ6LURtCw
Score
10/10
Malware Config
Extracted
Family
risepro
C2
193.233.132.67:50500
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d73bf02e574fc907ee25a373379532da515a089511755756d4792016d4c0b0da.exe"C:\Users\Admin\AppData\Local\Temp\d73bf02e574fc907ee25a373379532da515a089511755756d4792016d4c0b0da.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13.2MB
-
Filesize
13.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
13.2MB
-
Filesize
13.2MB