Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
291s -
max time network
254s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
01/05/2024, 22:45
General
-
Target
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03.exe
-
Size
3.0MB
-
MD5
19dfd5b4bfe3d47de322f69a68f5f69f
-
SHA1
6381f754706174e3f7d303cf9c1aa186f70bc4b3
-
SHA256
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03
-
SHA512
f350a4042694a2ec46801e074fd8165f5ec8ccc982753f8c5c17927b70f9f586f604d34a68657d7c7805e240fc8665f8453306367c1576ddfbb56ae3bd0f8314
-
SSDEEP
98304:RWbwor5H2hKLgjt+pGIY+fjYmyU2fNqdjPc/pJXJS:Mdr5WhKFRYqj6h8dbSphJS
Malware Config
Extracted
risepro
147.45.47.93:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 30 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03.exe"C:\Users\Admin\AppData\Local\Temp\275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB