General

  • Target

    8f9cfe0ba46921b15f850c0c8796ae17abfe5883026c2efb34e7e3cdedc61264

  • Size

    3.0MB

  • Sample

    240502-gq558ach96

  • MD5

    6613a27c78faa0eb9ad09b72455fa28e

  • SHA1

    95ebfa417387a8831e0961927e8363aab493c380

  • SHA256

    8f9cfe0ba46921b15f850c0c8796ae17abfe5883026c2efb34e7e3cdedc61264

  • SHA512

    1263ab5f8628d10b3ccceed7011c22a7aacff99ba4fbd2af0bce153c4b5f78e964cc76961fc05d59ffa01a5d977dbede639e40b18351120f7651da024d0bbced

  • SSDEEP

    98304:LV9iHdnyVZm1u8IlK9Kd0pAAS7A+06WWWThivC:5sHdnruPlK9y0RN+sThkC

Malware Config

Extracted

Family

risepro

C2

194.169.175.128

Targets

    • Target

      8f9cfe0ba46921b15f850c0c8796ae17abfe5883026c2efb34e7e3cdedc61264

    • Size

      3.0MB

    • MD5

      6613a27c78faa0eb9ad09b72455fa28e

    • SHA1

      95ebfa417387a8831e0961927e8363aab493c380

    • SHA256

      8f9cfe0ba46921b15f850c0c8796ae17abfe5883026c2efb34e7e3cdedc61264

    • SHA512

      1263ab5f8628d10b3ccceed7011c22a7aacff99ba4fbd2af0bce153c4b5f78e964cc76961fc05d59ffa01a5d977dbede639e40b18351120f7651da024d0bbced

    • SSDEEP

      98304:LV9iHdnyVZm1u8IlK9Kd0pAAS7A+06WWWThivC:5sHdnruPlK9y0RN+sThkC

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix

Tasks