Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15/05/2024, 13:13
General
-
Target
487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe
-
Size
8.3MB
-
MD5
20f676755aaed59eae1193bfe9b3ba0e
-
SHA1
9b79d150d84dd644183077bec4c2445e3061f63d
-
SHA256
487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d
-
SHA512
7f8392a43abc1bd0d256f35e2d41ff53eda216244c6da66d6614b1d083e27e29c4ab6f58cc283693c899dec22b4ef3cab4df04c2f9d7fb4da4c858cfbce16a33
-
SSDEEP
196608:cS1kfyzeeXVqlLJe03EmuFXxj72b5Hp1vWcDv+e:cwkKzeeXVqf0BFh/2RvHDN
Score
10/10
Malware Config
Extracted
Family
risepro
C2
5.42.96.54:50500
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe"C:\Users\Admin\AppData\Local\Temp\487929a170778f1a0b83405417e3dd51ffc423c86ab21f77669070b6578ddf2d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
15.6MB
-
Filesize
4KB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
3.3MB