Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37

  • Size

    5.8MB

  • Sample

    240502-g7z1jade24

  • MD5

    bdbfa4c9c9a72e85cd7aacbbb8a7a5b3

  • SHA1

    763ac7ece3a10e2f6a5cdf827a8de45d9fd5999c

  • SHA256

    eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37

  • SHA512

    d5be169775ab7ff0a3f2f22b007da5d379e2dab9e75d01689d80b796dc7088bea8fac6d009f81354de40299a216a0820c20fc32d8035793bcd80b5f7f4ad15c4

  • SSDEEP

    98304:0tWCkDPAq5WpxbxXmLRrGwblLcDNxJ+Hi/H8U9eTpvB4DaOFa0LPJia/wF+WNTez:0iPAmWDbNmDOX6bOeTpvBsJwFnTeQa9L

Malware Config

Extracted

Family

risepro

C2

194.169.175.123

Targets

    • Target

      eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37

    • Size

      5.8MB

    • MD5

      bdbfa4c9c9a72e85cd7aacbbb8a7a5b3

    • SHA1

      763ac7ece3a10e2f6a5cdf827a8de45d9fd5999c

    • SHA256

      eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37

    • SHA512

      d5be169775ab7ff0a3f2f22b007da5d379e2dab9e75d01689d80b796dc7088bea8fac6d009f81354de40299a216a0820c20fc32d8035793bcd80b5f7f4ad15c4

    • SSDEEP

      98304:0tWCkDPAq5WpxbxXmLRrGwblLcDNxJ+Hi/H8U9eTpvB4DaOFa0LPJia/wF+WNTez:0iPAmWDbNmDOX6bOeTpvBsJwFnTeQa9L

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

MITRE ATT&CK Matrix

Tasks