Overview

overview

10

Static

static

3

OfferedBuilt.exe

windows7-x64

10

OfferedBuilt.exe

windows10-1703-x64

7

OfferedBuilt.exe

windows10-2004-x64

7

OfferedBuilt.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OfferedBuilt.exe

  • Size

    2.3MB

  • Sample

    240625-p5rkda1cnh

  • MD5

    00614852dbe5c98d84c4501702d04e93

  • SHA1

    9d241403a7f438b9d14be0da70dc0089791f0971

  • SHA256

    fca76f40550256c7a1cdbb342fcd5e15b05a56ae214ea80cc2288f12e4257418

  • SHA512

    01403d2624044a646bbea613f93771aceb1b0466f13643b33ffc40c7d8add6744cb1401b26c921a3c0208050d6b3a6d57c22890472835a7a3875dae50c18b911

  • SSDEEP

    49152:2gJmZT23J+d5Q2gri9yVZpRxmzaL10JTM3lc/ncyh11+Ja:nJmU+vZgrxBmzah0JEJM

Score
10/10
riseprostealer

Malware Config

Targets

    • Target

      OfferedBuilt.exe

    • Size

      2.3MB

    • MD5

      00614852dbe5c98d84c4501702d04e93

    • SHA1

      9d241403a7f438b9d14be0da70dc0089791f0971

    • SHA256

      fca76f40550256c7a1cdbb342fcd5e15b05a56ae214ea80cc2288f12e4257418

    • SHA512

      01403d2624044a646bbea613f93771aceb1b0466f13643b33ffc40c7d8add6744cb1401b26c921a3c0208050d6b3a6d57c22890472835a7a3875dae50c18b911

    • SSDEEP

      49152:2gJmZT23J+d5Q2gri9yVZpRxmzaL10JTM3lc/ncyh11+Ja:nJmU+vZgrxBmzah0JEJM

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks