14e5f1f439f58184a27e073266dfc9bf2d40f6db110b641cd16672653e35b1ad

Sharing

Copy URL Twitter E-mail

General

Target
rise.zip
Size 481.4MB
Sample260813-2b6tesgp6v
SHA256 14e5f1f439f58184a27e073266dfc9bf2d40f6db110b641cd16672653e35b1ad
MD5 f1649f92de188b977a3f5279956eb34d
SHA1 175f5400da958d0c52983c2c487cc70f0798306e
SHA512 cec209b73bae57a3b21f7101f747a40f98b27323975021ccc9e59f8e934299148eb7c4856a059d8cefcb3abb4d4055820dda93b05f82e952e00ad3365f47451e
SSDEEP 12582912:5iOikCfSLVJWpMqfS7JWLmO7bRNAqPlhwbh64k93jvEbasH6aY:cOikCfSLyJSELLNAcDL4k93zEoZ
TLSH
T1C4393344F1F53651526EF6BB92E903C6A9D11065DF92CD3BFF8123E92324CD2A8C261E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  rise-packaged-windows/client-offline.jar
- Size 135.5MB
- SHA256 ea4d2c206c86f18caef69bc2c595997439370a6dcf602b721edf87b3bc4a8f18
- MD5 b65a9a5f1680a650edbe82879aea7a80
- SHA1 b03e24865f2ea26c8c7323d0fdac3ea63a61d465
- SHA512 21825eab46d71a79614de8a5a0529a9a75d8b13d86adae565f1fcd09235269cb293ab2ed9aaec949af7bf9ff9165b2e233c32b37bc61af67202a6a603dcce5c4
- SSDEEP 3145728:KRuTCwg5R2Jk5ewle38tKxWz9/5ivPNbyL3PHufl9B:KRuQT2JH8gxWp/kvP9yL3Al9B
- TLSH
  T1E8683398FDB6BA18E04F807D41B18183D0554F7E9848B2AFA77CB0A53DAADD45203D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  rise-packaged-windows/launch-linux.sh
- Size 415B
- SHA256 f20c863d180b67ae4ece249e9d3c21a21bfd1c0a19dc2e7c288007dd92cb8b43
- MD5 cc397fb61e6d00e56325a1844d438d8d
- SHA1 1e17c7dfcf3eadcb01618d6db0712d73cede8fff
- SHA512 a8258a986979bc6f5768d5078f2de0b40b3212f1b9ef7cf28f58796c204528167d9a4935cfeb59eaf961bf4f13eeb68abbe1a0bbe5d1a64de885684a0efe3347
- TLSH
  T1BDE0E59415F8A22DC2842E11FE792382DB74F1FAF50459D8AED11E1442F124834075FE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  rise-packaged-windows/launch-windows.bat
- Size 340B
- SHA256 44b79c9597d9ee04d4a291e48d63dcfa3b686193058387907a9d9a99070c5c6d
- MD5 d78cedac3ac30bf19324d5018a6e0406
- SHA1 89729b64fffcc813171576eb4f3f7e7919e43ca8
- SHA512 f80926c8fbde315378f7f24084caa7600896197ad0b4a9b50c192ddf40c573434ca3d4143917b844729851af81203c371123de4e9babf1434dafd4edd55c6e7d
- TLSH
  T1FAE0262BAD010B9D52311F01C3E967F3332CC4DB66139590ACC68F05214CAC70CAC66D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  rise-packaged-windows/libraries.jar
- Size 70.3MB
- SHA256 2f9aeafcd5c9ddf01e65b88bd008e2736b016fa3f4c3c6c902588a9c8c4b88a0
- MD5 8a968f7ba195f74079fa68b6ca18ec3b
- SHA1 565a16193422c0271964250441821cda5fac7844
- SHA512 80c3f4fdb94fc48c43c59e1ca16a0720c00d59d1a8ce73902166ed0baa5097d9d4fe47c12cc93db20a473ada3dbcf03bcc8a3e5527757e58e7748a875b445a65
- SSDEEP 1572864:MZHUTydtqwUsegx3tFZzxmzg9g2vL7BeSsJx9zP3imeWd:KUTUqwUsegltzxmMTvLFVczP35N
- TLSH
  T136F70257FDC5C03EE90790B31041C423A929C9EED04BEC5B16A849DB6865D8A27B3FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  rise-packaged-windows/natives/linux/libjinput-linux64.so
- Size 14KB
- SHA256 86e650f47790e789696a7a5809461eb4b503f5f841e17488aa7ee5a1bedc05a6
- MD5 23a6b611eaab617a9394f932b69ae034
- SHA1 bd4ff8a11cc9e5a068fc5d7a74122983a24ebeec
- SHA512 9f59083f28c732ed1aa74a4be9650797311bf1d8e608e53a6beefa5091ccd379bb5550d7ef0d46dec1af72c677ffa70a9474001f4dbfc1861bc6933d119526d6
- SSDEEP 192:RWAyIHEofBEK0V+TEUh0DXGfIZ7TFV933Dl:A2iK0VKhQGf4V9z
- TLSH
  T10752D823B02AC53BC9BFE3B849074265D575F4F8260527237628D7B82C65E746A47EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  rise-packaged-windows/natives/linux/libjinput-linux64.so_
- Size 14KB
- SHA256 288689b7946a12a880d1c161471ca937af4961b9407e6ff3e72d7ce5ff8cfce0
- MD5 05830743c6ddff3bb27f4558480df4d4
- SHA1 9593ad5fb9f8db1fd7a01b32608ec043ff07d195
- SHA512 d06ddc10422adf2779866ddbdfaaf47352ad5ab2b9d624633411bcbb35321ffed237866b72248dda5a6c7a8bdebdf4cfb69ccbfd9fd53153c4e03b78a173cde4
- SSDEEP 192:RWAyIHEofBEK0V+TEUh0DXGfIZ7TFV933D5:A2iK0VKhQGf4V9z
- TLSH
  T17D52C723B06AC53AC9BFE3B84D074265D575F4F822052723B628D7782C65E74AA47EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  rise-packaged-windows/natives/linux/liblwjgl64.so
- Size 429KB
- SHA256 2fb6f4f100ec4ca3dc6287ec07c40dc23d6ecd33ac36f2eded3e63e8f8d86a1c
- MD5 625b89c2874931798799e53ff38d8a14
- SHA1 804a68d66c42428315e53a5b63866d6f727872d8
- SHA512 2483f201689dc750fe3a61832da2e4ae30e70fbab4538fcbb5a411d48484f897a2375d42a677b4d1dfac84beda9c2c46ff1269b32b11d32e041f5748c1364cdb
- SSDEEP 3072:RLK/sfyqBjsUK3xWUkETv8B7mTUGGKlZvylw4dDzQaRAxCtjDkxen2Fir7fvcLHv:xfgIVmTUVKfaFdDAGgxe2Ar7fkL9cF
- TLSH
  T1D2941E57FE13C13EDFC7323651924572322C36D814861781325CEAA27CDDA788BB6EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  rise-packaged-windows/natives/linux/liblwjgl64.so_
- Size 458KB
- SHA256 4622966cceee1c13df9e293fbae8fa402d1be84b3e1ade7256eca57892392f08
- MD5 37c8b24a9b8e3be2fab5c15ce5aee1ba
- SHA1 c6ede7a034449dd96f867e1f80c2c8d7e62a853a
- SHA512 8314cbb5a0776650a360d2602f9f2fb492f047cd8d608f1b546f229e24de7cfa273877ac238e47c7ee85f543a712d947fb6fdfb0d57408c45973b0c6d75f243f
- SSDEEP 3072:kSht3Tv8jWGkehNPmRGDlxa4KSASqdrzr3NVdA2BoAcynKnCn/nnUnEkGNDtxU4K:ke3IrNCGD6Ntb+ILU4xy+mKDV
- TLSH
  T1BDA42043FD13D13EDE8B3137919149B6321C70D51B446781322CEAE678DDA784A8BFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  rise-packaged-windows/natives/linux/libopenal64.so
- Size 394KB
- SHA256 265310b84e3fbc292354ad9901425a4f6532e8c3f730f36be96edb790174091c
- MD5 c37b4211431a33a4ab014ef47b05b363
- SHA1 ebac433b3c88016d16f75e2f71174b3add407f95
- SHA512 d683334502e6741008f0cca94537251b09ef4bff9d0723dda54a942a6bf27f85581699d1834b695e4e6e4dfeb2d2996612c46c3129eda66584dea152c9bf0991
- SSDEEP 12288:P/EMjf3anA30AUvPjKaZucMCyDzPzccCDhYxQa:P/FmAED3jKaZPyDz3+a
- TLSH
  T135846C12E5B348BEC8AA95344D966B3FB631B4D11221AB37279CC5703D93E006F5EF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  rise-packaged-windows/natives/linux/libopenal64.so_
- Size 394KB
- SHA256 265310b84e3fbc292354ad9901425a4f6532e8c3f730f36be96edb790174091c
- MD5 c37b4211431a33a4ab014ef47b05b363
- SHA1 ebac433b3c88016d16f75e2f71174b3add407f95
- SHA512 d683334502e6741008f0cca94537251b09ef4bff9d0723dda54a942a6bf27f85581699d1834b695e4e6e4dfeb2d2996612c46c3129eda66584dea152c9bf0991
- SSDEEP 12288:P/EMjf3anA30AUvPjKaZucMCyDzPzccCDhYxQa:P/FmAED3jKaZPyDz3+a
- TLSH
  T135846C12E5B348BEC8AA95344D966B3FB631B4D11221AB37279CC5703D93E006F5EF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  rise-packaged-windows/natives/windows/OpenAL32.dll
- Size 381KB
- SHA256 baf27fc91dc852d78889e052cfc9ed2b6fc0927258bb507a895c6fcd50f10fef
- MD5 9e02334f9bba622885eadb059f0633b3
- SHA1 ede381bf55e7d0cd3a7e058237bbc66a8ff63837
- SHA512 066eaaee241976d99e3f11de415976fb0e47e97035d4d7a7c121c33882190f3546637650f841a2858ac1734655f4994dc2cb8c5bdda5828557485fc20a779def
- SSDEEP 6144:qB0wNMEdGJE5cN8PLJ8I1kabGLPwrWr+JervPI6YXaZ8AO8+H1MOi7BU:qBDL+af1kabGL/r+JwvPjKaZ8NMO
- TLSH
  T1EE84D012B6F3C072E06B16754851AFB14EBEBE211071C8B7AFF40D5E4E3A651CA63B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  rise-packaged-windows/natives/windows/OpenAL64.dll
- Size 373KB
- SHA256 9261b66010a845ddef9f61d5e4266fe2f08a53f3605da002e9e8f8d202bdbc5e
- MD5 89021c218a3f6feb807a664f852ffbd3
- SHA1 97362fba53dfb6d9581b8c64829f4b1d98a97855
- SHA512 e511c707c4453016cdeefcbc863fbf2750ad9cda12ad31f27369d5a396f9c98d9ef37fafb4030c683f17b1e2cdcfce924015fe49dd6652c3060bb0ba77ea3064
- SSDEEP 6144:ABdTusYmeqPD3H/Jm9iQV4+ttOpJ2z4dpFg1RB/vPI6YXaZqRs0:AjTWIbgOmyEvPjKaZqR
- TLSH
  T1F284AF4AF77208B9E46B9635DC93BA1FE772B84D0660834F07B48A665F37731195B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  rise-packaged-windows/natives/windows/avutil-ttv-51.dll
- Size 240KB
- SHA256 2d3625d6338a2fc51d166d0fbc2983f59f44a493768cc3238c08dff9ba2232a1
- MD5 09daff57e3d67fe46a6ae2b3c98740fd
- SHA1 85185636774554b1e49146fce256a1be3c6ade2f
- SHA512 3eb9780ce2a0012bea8dbff5d2e868deec0f0ff160ed1ca947e5101b180d1d8b0b75cc7fddab6b413c77aad3d76e198625864e7aa72099bbcf8b63c989b17097
- SSDEEP 6144:7l4mm0Sh3X6amvIEkKCGJUwLr1PIcaA9hdPVsHB5TR1U39Iy76:7rSkaYkzAycKR1U3uc6
- TLSH
  T10D343BC1F5CB1CE5F6222739C19BD32B6739B6418223EF92E7186627AD335813C66316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  rise-packaged-windows/natives/windows/jinput-dx8.dll
- Size 60KB
- SHA256 89779abf806a93dd809bc7a4914967d0e6924dedf293afd48dd205dbce87d8b8
- MD5 ec587acff9c06d699829908b515ea17e
- SHA1 50348b2958b017df3bf30d7915ab61a4cb9a2b33
- SHA512 2a7895d6196e3f1f740982bd4d0daeba255a033c971638e3aebd2cd2233c39f7c8e92c72d2eeb41f8b368d388a3b270fee2cbe219ee239f5d62af9f6f8ed72d7
- SSDEEP 768:2Rj4ZLedvA5Z3cYlqcMOml0V6jY/MDS5TQkuzFqIn1pCDFECBXT7kE:gyLwvA/cYuLpYMSp2zJn330TT
- TLSH
  T147536B113652C872C05B74355425D7B13A7E26306BE899D37B9A1BBD8F252F0BA3E30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  rise-packaged-windows/natives/windows/jinput-dx8_64.dll
- Size 63KB
- SHA256 a38cb458b9e5a246d7418f38ac04430c2e5a3f46b082955d6dfd5d2bd74f4222
- MD5 90cab52fca89e7d233741c0439dc2005
- SHA1 5d9a7d3fb6224dab97aaff7bd9430232732d9be8
- SHA512 041ca3aa3d6560f207d841c8af1939e4e93538fe4f34d74fb9eee003733d98783914c6cbe45022c483a6cfb54f0e4f25013f67851d9ae6e9ea6a8cc158d28936
- SSDEEP 1536:PVt32LOgsg0Vn88QhCuUDhsI0CSS2u4mL5Ie2JQ:H2JsLV88QguUFT9DL5I9JQ
- TLSH
  T10F534A1773A540F9E4579278CCE34E4AEB32B415137643CF1B6886AE6F633E2563A308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  rise-packaged-windows/natives/windows/jinput-raw.dll
- Size 58KB
- SHA256 0a8c0b47e173453bd92da224f73a6aff35b07c2db315abaf33e68edbdb147971
- MD5 0862d141de8b4dd93ac55cd4a1a78b69
- SHA1 4d982f408e815519c2289cd720c78338392a9887
- SHA512 c070516f902082c3eda3f19fab6d6a6998442664f1b25d5d4c2229c03b7cac1a2a41d78b98474dfde3514bc206f5fb92e1949627e3e64052e0ed880e3f6a52ad
- SSDEEP 768:YxAM8x3LQmQhccHXx+LHfFCxMJvI/+q9c6LTZsTUkwS9/FE5HBXTWoJCRX:tDI3+jFWTLTiUknG5NT9JMX
- TLSH
  T1AF436C117601D073D06A60396426D3724A2EBD3117F1C9C3BFAA0B7D9E613E2B67B34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  rise-packaged-windows/natives/windows/jinput-raw_64.dll
- Size 61KB
- SHA256 832308f96b1760f2ebc183d1a1771278bb3236e4567dd7a23e1eaecf95f9c03c
- MD5 ffc85e4a631d90112aee8e213cd367cd
- SHA1 067c11135f9ebeb554d5f80b7a8a5244c0f3b7d7
- SHA512 376393d9351ad2317bdff831df012ef993039c6bcb0616dec3c91ff1b13568a6f04c3bc8a0f9888aabafa7182513fe5f7fe5fe1fca7f14f64b58414e02bd8c48
- SSDEEP 1536:ZFG7/fQHJY7EJsvjf30G8DbI7RfnBUVEGhM0q2JKmf6:ZFG7QHy7EJsvjfkG8QnByfJKm
- TLSH
  T191535C06739500F9E86B8275C8D35F96E672F41603B243CF5B78C66A6F233E1663A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  rise-packaged-windows/natives/windows/jinput-wintab.dll
- Size 55KB
- SHA256 59201c94eb563025e47fe6b6f5c4dc326f0059d49285e2d3a44482cb60ffc9e2
- MD5 7b5d669b490d5737d8a9d1f96274e2e5
- SHA1 e7b9beead279298611d0c4753089d3af07c4c9e9
- SHA512 ac43cfe9e3ef9dc0e1d2e49a8bbba041b5eca0d4822e694031c694f463017f39ad0131b9f689cc30d177bbf0253f6d2942314683c1ab51a54674ad1309baaeff
- SSDEEP 768:gxucOm6iQLZXNvJGgY1mus+XBpkJ3L6GAwk44Rv+1mYxTauAR:ZcZQbzZC8J3LfA0Wk1T4R
- TLSH
  T155435B117200C073D11A6036151AD7B15E7E7D311BE99883BFAA1B7E8F712E2B67B34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32