Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d1b158fc55...6c.exe

windows7-x64

10

d1b158fc55...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1b158fc552314ff130b9e125a79eb4e715e5d56b38f8328b1a0ef278d4c106c

  • Size

    1.3MB

  • Sample

    240615-l38t4awfph

  • MD5

    3aa5d0f44fe4cef943b066d6f20597dc

  • SHA1

    8049eb8e26747e48e48e32785b6363b21e2af0cb

  • SHA256

    d1b158fc552314ff130b9e125a79eb4e715e5d56b38f8328b1a0ef278d4c106c

  • SHA512

    a5c8141a06603e9ccf66a0e99dc39a43d2da6f24a894c25bb978b55cea2a506c3b17f09a3879e7009bd1b6b72da74181b4ecddd8da291a611c3579df03c2fd84

  • SSDEEP

    24576:U3Jh9XnYGWgi8ml51+/XgQARuuV6k6WD4UL6p8+wQmcaWnBCqMPNymLKC1:UX9IXgi8mligQZjnpLlmcaWntMQmLf

Score
10/10
riseprostealer

Malware Config

Extracted

Family

risepro

C2

147.45.47.126:58709

Targets

    • Target

      d1b158fc552314ff130b9e125a79eb4e715e5d56b38f8328b1a0ef278d4c106c

    • Size

      1.3MB

    • MD5

      3aa5d0f44fe4cef943b066d6f20597dc

    • SHA1

      8049eb8e26747e48e48e32785b6363b21e2af0cb

    • SHA256

      d1b158fc552314ff130b9e125a79eb4e715e5d56b38f8328b1a0ef278d4c106c

    • SHA512

      a5c8141a06603e9ccf66a0e99dc39a43d2da6f24a894c25bb978b55cea2a506c3b17f09a3879e7009bd1b6b72da74181b4ecddd8da291a611c3579df03c2fd84

    • SSDEEP

      24576:U3Jh9XnYGWgi8ml51+/XgQARuuV6k6WD4UL6p8+wQmcaWnBCqMPNymLKC1:UX9IXgi8mligQZjnpLlmcaWntMQmLf

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks