General

  • Target

    e76e709d493d3bef8e83c234809e5620_NEIKI

  • Size

    1.3MB

  • Sample

    240509-eka2sacc87

  • MD5

    e76e709d493d3bef8e83c234809e5620

  • SHA1

    fc45f431c9772f40b87f2b66d3a8cbc1dc73ac0a

  • SHA256

    29afac34a5347ea92ef86ba9debfbf39027dd39ef0e025b0309b54a6abb43d54

  • SHA512

    5692704b7dcb5793b9df8b848e096300cf0dd080c57014307905ad329d886491f390dec187f7f3e80b84dc61787ba315a5c77c7ddeae6b4ed1e1989f779a5843

  • SSDEEP

    24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      e76e709d493d3bef8e83c234809e5620_NEIKI

    • Size

      1.3MB

    • MD5

      e76e709d493d3bef8e83c234809e5620

    • SHA1

      fc45f431c9772f40b87f2b66d3a8cbc1dc73ac0a

    • SHA256

      29afac34a5347ea92ef86ba9debfbf39027dd39ef0e025b0309b54a6abb43d54

    • SHA512

      5692704b7dcb5793b9df8b848e096300cf0dd080c57014307905ad329d886491f390dec187f7f3e80b84dc61787ba315a5c77c7ddeae6b4ed1e1989f779a5843

    • SSDEEP

      24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJZrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TRrK5Zln2i6

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks