General

  • Target

    297270c13474cdcd006acc261c98050a.exe

  • Size

    4.8MB

  • Sample

    240812-lfbk3svdrm

  • MD5

    297270c13474cdcd006acc261c98050a

  • SHA1

    40fd185b12939822e4cc02da09ae3d38aea83306

  • SHA256

    ddc4a98828ac3afea03294fd57189778ce57e305d075f08f0ace443352d5447b

  • SHA512

    cb1a42bf6c34f3042809f29a6cb2e11f4699c4d1718e5da340fac205a6875145cae2a690736206d8c19ad68916efc5c835d3488a1aa272f0d0e00cddeb150d00

  • SSDEEP

    49152:/s+CpclD5n5jx/cOOXjdyfpPaG02dj6cwH4n1Yzb5UBAyXjYeBhZ8jGdn7h:XxlDnZpPx024cw47

Malware Config

Extracted

Family

risepro

C2

193.233.132.67:5000

Targets

    • Target

      297270c13474cdcd006acc261c98050a.exe

    • Size

      4.8MB

    • MD5

      297270c13474cdcd006acc261c98050a

    • SHA1

      40fd185b12939822e4cc02da09ae3d38aea83306

    • SHA256

      ddc4a98828ac3afea03294fd57189778ce57e305d075f08f0ace443352d5447b

    • SHA512

      cb1a42bf6c34f3042809f29a6cb2e11f4699c4d1718e5da340fac205a6875145cae2a690736206d8c19ad68916efc5c835d3488a1aa272f0d0e00cddeb150d00

    • SSDEEP

      49152:/s+CpclD5n5jx/cOOXjdyfpPaG02dj6cwH4n1Yzb5UBAyXjYeBhZ8jGdn7h:XxlDnZpPx024cw47

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks