Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4

  • Size

    3.1MB

  • Sample

    240516-3d5vkseb2s

  • MD5

    ed0700ad9042662d28303185f09176fa

  • SHA1

    a836bc14a29d7ee1593589bb5b479712f72eed67

  • SHA256

    7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4

  • SHA512

    ec9138a37cdf0a0b6e6b58cf401e06fffd484c52d823742830cdfb1f1d6b0abbb70c122b7792646003b74c1d7181d415e5ca94184b4dbe9c78b0f9c33aceda0a

  • SSDEEP

    49152:TSCoClCEUFuQ55QDg5rqFpZig0its3AYZDfH7I4qLcsDlr2Zp71PhP:TcClHUgQIgqWg0QcJHZqTDlr23

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Targets

    • Target

      7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4

    • Size

      3.1MB

    • MD5

      ed0700ad9042662d28303185f09176fa

    • SHA1

      a836bc14a29d7ee1593589bb5b479712f72eed67

    • SHA256

      7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4

    • SHA512

      ec9138a37cdf0a0b6e6b58cf401e06fffd484c52d823742830cdfb1f1d6b0abbb70c122b7792646003b74c1d7181d415e5ca94184b4dbe9c78b0f9c33aceda0a

    • SSDEEP

      49152:TSCoClCEUFuQ55QDg5rqFpZig0its3AYZDfH7I4qLcsDlr2Zp71PhP:TcClHUgQIgqWg0QcJHZqTDlr23

    Score
    10/10
    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks