Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
296s -
max time network
299s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
02/05/2024, 06:27
General
-
Target
eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37.exe
-
Size
5.8MB
-
MD5
bdbfa4c9c9a72e85cd7aacbbb8a7a5b3
-
SHA1
763ac7ece3a10e2f6a5cdf827a8de45d9fd5999c
-
SHA256
eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37
-
SHA512
d5be169775ab7ff0a3f2f22b007da5d379e2dab9e75d01689d80b796dc7088bea8fac6d009f81354de40299a216a0820c20fc32d8035793bcd80b5f7f4ad15c4
-
SSDEEP
98304:0tWCkDPAq5WpxbxXmLRrGwblLcDNxJ+Hi/H8U9eTpvB4DaOFa0LPJia/wF+WNTez:0iPAmWDbNmDOX6bOeTpvBsJwFnTeQa9L
Score
10/10
Malware Config
Extracted
Family
risepro
C2
194.169.175.123
Signatures
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37.exe"C:\Users\Admin\AppData\Local\Temp\eff0ff1a9186ca9d78eeb78f24b97d2a7e558f57bae5f3e1de7b0a7283e78e37.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.2MB
-
Filesize
10.2MB
-
Filesize
10.2MB
-
Filesize
10.2MB
-
Filesize
3.2MB