General

  • Target

    c8432b773d48e5e0a9f2d1ecb7c557f8.bin

  • Size

    2.2MB

  • Sample

    240609-fjgnlsdh6x

  • MD5

    cc5685557d1555f460fb338683907e10

  • SHA1

    1e577c55dbfd78fa16b4035b18a508591f40b370

  • SHA256

    944e157445ebb73a3fa0af3f729a8fb06db3440885daa5d18dd83dabb0b42e9c

  • SHA512

    02dd443f1ef4aacc6c9acdb3affd347785393cc371ae995d40940f0388f56db48a1d75cefb29efff24681e3014cc105996765b47d9f26c6dce3e5dd058cc2516

  • SSDEEP

    49152:9lyGZSDIC0HPT2dvOOPHbFQL3HhUNTeLdTxbiMwh+BpiBt1e5ak:TTyIBHPCpfiueLRxbEh+Bp1

Score
10/10

Malware Config

Extracted

Family

risepro

C2

77.91.77.122:50500

Targets

    • Target

      68a9e97be5bec9fba6108897ebef0a1f00dec90cf894071dc80ba0fed62a2999.exe

    • Size

      2.6MB

    • MD5

      c8432b773d48e5e0a9f2d1ecb7c557f8

    • SHA1

      ffd30a12849776a23351e9e768fc7b635553c271

    • SHA256

      68a9e97be5bec9fba6108897ebef0a1f00dec90cf894071dc80ba0fed62a2999

    • SHA512

      7d2e4e382f9591f0ba5098d6a265f6b70b5a6c360f6223ac0309edf7bea7c13c4b951888244ddafb512127b2c192075aeaf77a93ded3a1336e822abcfd83ebc8

    • SSDEEP

      49152:KDjlabwz9PDjlabwz96f+wrja6tTPZYoUKm5OeNRwXIM2BfM3:6qwhqws+ia6tzZ1Zm5OmRwX0B+

    Score
    10/10
    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks