Overview

overview

10

Static

static

1

fad774edc5...e9.exe

windows7-x64

10

fad774edc5...e9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc060061922aadff7ff05f900176d43a6327a66602852b445315e749fb4c968d

  • Size

    5.2MB

  • Sample

    240708-lz5chawdma

  • MD5

    cd85148f14c4d89fe4d885b45736e2c5

  • SHA1

    2dcde0154ee75894f7c852acc8c75ea89ca34638

  • SHA256

    fc060061922aadff7ff05f900176d43a6327a66602852b445315e749fb4c968d

  • SHA512

    80ece0a1a9f158b5986a6b2f89a1b52af9ccd718f2cca49ff5871ab73190b1762f7c4e61a4b3e976a1b0b610610b15fc24e6410bbb73945ea2488f2fbe8e7ad9

  • SSDEEP

    98304:eYlJ2R0LksnA4wxNZRtEmeCuj2ZAnJ6746LYZOc4WVEreCREdj5D:BJ2crnZwTQCZaJ6kvFQe/dj1

Score
10/10
riseprostealer

Malware Config

Extracted

Family

risepro

C2

77.91.77.180:50500

Targets

    • Target

      fad774edc5a3699e77ff65728d21606542b053da4b43ab0594339bde7eddf6e9.exe

    • Size

      7.5MB

    • MD5

      ed5b1701e46aa9b8915e2c407802ad8a

    • SHA1

      a9a4fdf15431716b9ad56c38181f2e4d20d5e66b

    • SHA256

      fad774edc5a3699e77ff65728d21606542b053da4b43ab0594339bde7eddf6e9

    • SHA512

      4692c54c831fd600380131c3cb8f6a86543da19bd64f424082b0bc3c3f2286a85aad2a0235e8716b0a81ede2591d17f7c849421b90592a0c37003c0a25b8b0eb

    • SSDEEP

      98304:88T8pL9gfNShiK0esxzePg+SeAhAgKbAYOSpkyxE+Hs2tc2oXlpSd0b:88T8pL9gfNSwK0eIhlKbAYHxE+1o+dQ

    Score
    10/10
    riseprostealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks