General

  • Target

    8240610c302e53f894185cda435fbd734c7f926eb142ac6f253eced2266f21f3

  • Size

    6.4MB

  • Sample

    240502-gp4wrsch64

  • MD5

    da5c006f253c038a2f08b0699d747e41

  • SHA1

    aa1694bfc2298eaf651a1feed6da3d8bce2bd8a7

  • SHA256

    8240610c302e53f894185cda435fbd734c7f926eb142ac6f253eced2266f21f3

  • SHA512

    b41560822cc107a5d640f0bcd7281ed08d9760d8f0eec0b1986187ab5cf4d482c2fb0f162096fb4be60a3d5250975d843d3787cfabb579cc4bc30873f10d5e00

  • SSDEEP

    196608:mrCogE+pabRdrJZlo2bvkGLiKGGA2TvPORTucNr:xgbRdrxMwi0t79s

Malware Config

Extracted

Family

risepro

C2

194.169.175.128

Targets

    • Target

      8240610c302e53f894185cda435fbd734c7f926eb142ac6f253eced2266f21f3

    • Size

      6.4MB

    • MD5

      da5c006f253c038a2f08b0699d747e41

    • SHA1

      aa1694bfc2298eaf651a1feed6da3d8bce2bd8a7

    • SHA256

      8240610c302e53f894185cda435fbd734c7f926eb142ac6f253eced2266f21f3

    • SHA512

      b41560822cc107a5d640f0bcd7281ed08d9760d8f0eec0b1986187ab5cf4d482c2fb0f162096fb4be60a3d5250975d843d3787cfabb579cc4bc30873f10d5e00

    • SSDEEP

      196608:mrCogE+pabRdrJZlo2bvkGLiKGGA2TvPORTucNr:xgbRdrxMwi0t79s

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix

Tasks