General
-
Target
https://gofile.io/d/G8bbmP
-
Sample
250107-rm516awpfk
Score
10/10
Malware Config
Targets
-
-
Target
https://gofile.io/d/G8bbmP
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Risepro family
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1