Overview

overview

10

Static

static

3

60f3d0f642...cs.exe

windows7-x64

10

60f3d0f642...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics

  • Size

    3.1MB

  • Sample

    240512-dj4f9sdd8v

  • MD5

    60f3d0f64254ceef794db8034f5f2550

  • SHA1

    0aabad2f9b09447747e0f46bdbf74c8b35aaeb50

  • SHA256

    f799ba874f6ee86001b59af01823a4caf374f0fc615ee4a5c8c65302a30292a8

  • SHA512

    dcf092b866a4b7293b819a87f023670c2b35cf33fa126d7cb533f59e7bb4c3f22fae5f881a1438de3a655b8b56c80f0eb90626f1900a8e48c29574d8df99b234

  • SSDEEP

    98304:+gwoXlECvdTlWgpsFl3XTQX/ezJa5zG4l2Gu:ht11agOFdcXMSzL2

Score
10/10
riseprostealer

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Targets

    • Target

      60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics

    • Size

      3.1MB

    • MD5

      60f3d0f64254ceef794db8034f5f2550

    • SHA1

      0aabad2f9b09447747e0f46bdbf74c8b35aaeb50

    • SHA256

      f799ba874f6ee86001b59af01823a4caf374f0fc615ee4a5c8c65302a30292a8

    • SHA512

      dcf092b866a4b7293b819a87f023670c2b35cf33fa126d7cb533f59e7bb4c3f22fae5f881a1438de3a655b8b56c80f0eb90626f1900a8e48c29574d8df99b234

    • SSDEEP

      98304:+gwoXlECvdTlWgpsFl3XTQX/ezJa5zG4l2Gu:ht11agOFdcXMSzL2

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks