General

  • Target

    setup.exe

  • Size

    2.2MB

  • Sample

    240928-bdsrgaydpj

  • MD5

    f6c330bf80269e6a2ce60b6c173ede5e

  • SHA1

    3a1ee94b51b65b73ae8694d407feae213cdfa0a3

  • SHA256

    dd41646c21ed512b30eaad50eca6e74a45ecd7c6c7bf9d1c6aa804c2ea845428

  • SHA512

    9ff5152bbbf71574dd1abf4a7a05b4884e7f2d1c5bb7d7e1e1ff0e467aaa83221a04cbb47257ea4394d637b01f5f59d0938af6ae4699069f8fe49ca1afa88e43

  • SSDEEP

    49152:q1kvIsRS6E2Z7ZkgbGrs1qi+ldn5Yp4cCA5XSVRrnzUM1vSxt3W:ekZRBpBGrN+p4DAgjQMpC

Malware Config

Extracted

Family

risepro

C2

193.233.132.253:50600

Targets

    • Target

      setup.exe

    • Size

      2.2MB

    • MD5

      f6c330bf80269e6a2ce60b6c173ede5e

    • SHA1

      3a1ee94b51b65b73ae8694d407feae213cdfa0a3

    • SHA256

      dd41646c21ed512b30eaad50eca6e74a45ecd7c6c7bf9d1c6aa804c2ea845428

    • SHA512

      9ff5152bbbf71574dd1abf4a7a05b4884e7f2d1c5bb7d7e1e1ff0e467aaa83221a04cbb47257ea4394d637b01f5f59d0938af6ae4699069f8fe49ca1afa88e43

    • SSDEEP

      49152:q1kvIsRS6E2Z7ZkgbGrs1qi+ldn5Yp4cCA5XSVRrnzUM1vSxt3W:ekZRBpBGrN+p4DAgjQMpC

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks