Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    29391895e04c1caa85e62d641e3cdb5aa40b20f178639c05ffdeb354f8e0ef61

  • Size

    3.0MB

  • Sample

    240523-21clwacf73

  • MD5

    6af5551d3f5b3d2242407a4f1409ebfb

  • SHA1

    a75132c3a0ec4a027bf2066980e91f6624300976

  • SHA256

    29391895e04c1caa85e62d641e3cdb5aa40b20f178639c05ffdeb354f8e0ef61

  • SHA512

    ee2fa0ae19128c2f46903ef05d9d9a28a714a98791a148f11cb604d9867121422c1a48f945be5db3994a1f9071c93b61b450d77f4949b614f7262df90152abef

  • SSDEEP

    98304:0wF8GteqQREbNhKIhr470UgNmS4n1Kn+PT:0BYeqQRc347OmT

Score
10/10

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Targets

    • Target

      29391895e04c1caa85e62d641e3cdb5aa40b20f178639c05ffdeb354f8e0ef61

    • Size

      3.0MB

    • MD5

      6af5551d3f5b3d2242407a4f1409ebfb

    • SHA1

      a75132c3a0ec4a027bf2066980e91f6624300976

    • SHA256

      29391895e04c1caa85e62d641e3cdb5aa40b20f178639c05ffdeb354f8e0ef61

    • SHA512

      ee2fa0ae19128c2f46903ef05d9d9a28a714a98791a148f11cb604d9867121422c1a48f945be5db3994a1f9071c93b61b450d77f4949b614f7262df90152abef

    • SSDEEP

      98304:0wF8GteqQREbNhKIhr470UgNmS4n1Kn+PT:0BYeqQRc347OmT

    Score
    10/10
    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks