Overview

overview

10

Static

static

3

World-of-W...up.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    World-of-Warcraft-Setup.exe

  • Size

    4.6MB

  • Sample

    240524-q5cxnagb3y

  • MD5

    fcb951a7808c25f5cf05f6e38ce21d5f

  • SHA1

    bed818ae697cfb3b3b699bdc0506bf632a477e3d

  • SHA256

    7cc9061f11a40de913ec753680663bea073617eb631920b6a7db35e3d6cd327d

  • SHA512

    35487d31e2d6963b3d9b27ace935c167062cd6a1bcce70b46e9df112fc7ae2863f9e9cbaab99a57076a8ff49481e485ab4d49839d1f533815b6d26ba7d77d982

  • SSDEEP

    98304:V84BwyMWieDN4+F/8njOyiiqTriBcx7t:VAEwnjOy5qQcl

Score
10/10
riseprostealer

Malware Config

Targets

    • Target

      World-of-Warcraft-Setup.exe

    • Size

      4.6MB

    • MD5

      fcb951a7808c25f5cf05f6e38ce21d5f

    • SHA1

      bed818ae697cfb3b3b699bdc0506bf632a477e3d

    • SHA256

      7cc9061f11a40de913ec753680663bea073617eb631920b6a7db35e3d6cd327d

    • SHA512

      35487d31e2d6963b3d9b27ace935c167062cd6a1bcce70b46e9df112fc7ae2863f9e9cbaab99a57076a8ff49481e485ab4d49839d1f533815b6d26ba7d77d982

    • SSDEEP

      98304:V84BwyMWieDN4+F/8njOyiiqTriBcx7t:VAEwnjOy5qQcl

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks