e081b9658424dcdaa5a2ea652803f74d9e492bd5efe9e43b6cfdc8c51749b091

Sharing

Copy URL Twitter E-mail

General

Target
Rise-rat-safe-server-bundle.zip
Size 158.6MB
Sample260905-3br6psbk9s
SHA256 e081b9658424dcdaa5a2ea652803f74d9e492bd5efe9e43b6cfdc8c51749b091
MD5 254ae49ce2c9300acfd46d7b5c623030
SHA1 bdf384d29a06b6415c82c0e9b01bb17e0e0d2739
SHA512 246fda629a3932033cb6e2e860c0b588418506e42c6cdfc3f096d37a8ba0e985ebc277f01b986bddb69bea5ba02cc031ab0865e3db8d7ec2cfecc22c9ae341b1
SSDEEP 3145728:d7OH+f/MdhzLDWQYiJ/jH2WfJ7i5zVroOY6+cVfzrL9a:dfEdhz8iJL9s96XchrLM
TLSH
T1698833D9F36AAE14865DB7E44041C79425E8404AFBD2EDBDF7CCE1BA73198C621807E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Rise-rat-safe-server-bundle/Rise.jar
- Size 152.6MB
- SHA256 0cdc812275ac8f73c57b01596bf9d7ad2b8e51c3330532794a43ed63c2cf6b47
- MD5 adc2abcf25fbb46fc048914ff25bb706
- SHA1 65e4af8568923e0cb3ed73a2e347938f06b2ef4c
- SHA512 fab44435ababc4bc774efdde52be494e29a42b8a79cb1ebf21dc8133a1b03cbee175681cab2bc52831676a4729c0a8e68ad304c72cd6f2a85695fd66642aefb6
- SSDEEP 3145728:0Jk5eIrtDRy5XWC3uG2TxJeWs71osh5Ma3ieL57wUsegxykO:0JoNRyN+G2NY7Osh6GOxyb
- TLSH
  T1D5782316BDD5D879D83B84B70251C022E92BC9FCD44AE05F26B845CA6CE9C892713FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Rise-rat-safe-server-bundle/natives/OpenAL32.dll
- Size 381KB
- SHA256 baf27fc91dc852d78889e052cfc9ed2b6fc0927258bb507a895c6fcd50f10fef
- MD5 9e02334f9bba622885eadb059f0633b3
- SHA1 ede381bf55e7d0cd3a7e058237bbc66a8ff63837
- SHA512 066eaaee241976d99e3f11de415976fb0e47e97035d4d7a7c121c33882190f3546637650f841a2858ac1734655f4994dc2cb8c5bdda5828557485fc20a779def
- SSDEEP 6144:qB0wNMEdGJE5cN8PLJ8I1kabGLPwrWr+JervPI6YXaZ8AO8+H1MOi7BU:qBDL+af1kabGL/r+JwvPjKaZ8NMO
- TLSH
  T1EE84D012B6F3C072E06B16754851AFB14EBEBE211071C8B7AFF40D5E4E3A651CA63B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Rise-rat-safe-server-bundle/natives/OpenAL64.dll
- Size 373KB
- SHA256 9261b66010a845ddef9f61d5e4266fe2f08a53f3605da002e9e8f8d202bdbc5e
- MD5 89021c218a3f6feb807a664f852ffbd3
- SHA1 97362fba53dfb6d9581b8c64829f4b1d98a97855
- SHA512 e511c707c4453016cdeefcbc863fbf2750ad9cda12ad31f27369d5a396f9c98d9ef37fafb4030c683f17b1e2cdcfce924015fe49dd6652c3060bb0ba77ea3064
- SSDEEP 6144:ABdTusYmeqPD3H/Jm9iQV4+ttOpJ2z4dpFg1RB/vPI6YXaZqRs0:AjTWIbgOmyEvPjKaZqR
- TLSH
  T1F284AF4AF77208B9E46B9635DC93BA1FE772B84D0660834F07B48A665F37731195B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Rise-rat-safe-server-bundle/natives/avutil-ttv-51.dll
- Size 638KB
- SHA256 d16151cf613bd26f9138188efab2e55df37b0c21956ea70adc252d0fa35ae3cc
- MD5 c804476200c9b4910cbc350c102fc3fe
- SHA1 97ae5816326546ef5672ec795d4e79e75d9298d7
- SHA512 468a2b13880dca54314c4a4105c714b0b189a5918b983e8bbaf4a43c78a7c995d99cae737d0222ca6923e194478e9a656dda6dca2d09f2ddc676bda4b20ed7b5
- SSDEEP 6144:mN2o9X6YsZZUZsREg3rscdPVsHB5exH49kIOz73zxv/1Bt3Azjyaj22p:A9KYsZ+ZqbH49kIO/39DGzjyaj22p
- TLSH
  T1ECD46C96A3D5FC9FC92507765CAB43203B39F5912783DF4BAB1895742D23B806EC2E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Rise-rat-safe-server-bundle/natives/libmfxsw32.dll
- Size 15.4MB
- SHA256 39aa5129f3e61473de411a3e286a8ab2a410436923bbaa9320610de30ee1df5f
- MD5 6980f97a2a92dce04c5cce88028bd160
- SHA1 e5d5daf7b8ce47bd2ecbc34a28357d5a16f7262a
- SHA512 954b75290c1223fd9652389b16f24dd7e5ed4bc1028b1be857c555248eda8b8b1c6414d36af529dec82adae303bdbc2138fa735f0d31a009bb415347756a32d9
- SSDEEP 196608:JdsQK8Wj/go87dBJA+qsIX0DSFzFveFVlNSmfJzPmFpfaGUaDHxnQ7doP5hlt1Ya:PeV8o87dB30B1lti9q
- TLSH
  T16FF68DC1E3E342E0D44708B0A43FB56FA634270A861CD6F3E7D4AF25E8767819EB6255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Rise-rat-safe-server-bundle/natives/libmfxsw64.dll
- Size 19.6MB
- SHA256 b5eaa1918ffbdcdfaf91a4895dac20b6325a9f53d20f343b7e7f05ff95c9aabd
- MD5 29bc29f7c4116ed33810a85c7de74532
- SHA1 034e6cd4ccfb319fe18007151cbe661436661ab5
- SHA512 9413ee1260c2eb758efcf32b5531e334d459542bb38164caf02aee93915eaafe33ff4f9ff4bca4b63081777cda9344ae81e365d82906d51dc0e9511dacefa084
- SSDEEP 196608:3QSvzp6YCFanvMwgVIzEcTNFkvQkSWDl5WRzu:3iG4cUIDRzu
- TLSH
  T131279E83F0E641DCE017C870957DE613FA20381D461866E797D1EA647E6BFC09D3AB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Rise-rat-safe-server-bundle/natives/libmp3lame-ttv.dll
- Size 672KB
- SHA256 d2941e4392fe2c55f7858b0e5d76567b6dea00c99ebbbf9e6049cefc5241c0e0
- MD5 80af59d20146e88b50814bb5701140ad
- SHA1 cc0c9bf8e76734d23313ec83efba7440dce31b91
- SHA512 cfdac48d58fdcf1208be32550a6948895c93bb49d27b485bf824d3e33749d8212aa8477c31fa12eb2f282ca9a662874cd258ce1bf1d35ab25424c81408dc8239
- SSDEEP 12288:Nt2IstF8quqw8taHNfEAoEe5927IYROSAfaaEDxm1fcgpKXdq:EtaHZtb716aaE9m1fcgpKXdq
- TLSH
  T1F3E46A52E3D2CD9FC522573049A76732E734F4901763CFCB2B90AA382DA3B846E86755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Rise-rat-safe-server-bundle/natives/lwjgl.dll
- Size 334KB
- SHA256 416fbc2a1e0405a3ef9ed6a51913137dd7ecc6c83973cf2bcea2ead209949bba
- MD5 e0575f7e330be5ad2d728a5ca2d5f49a
- SHA1 b78b4b746388d94bb1f06541eb69be755cb7f576
- SHA512 f8cebdd8b140e98b73ddf9d69abf5e978690aa9d6b597ec90750e5726387db85b54cbe2f86a1ab27e69abf8eb54c7ff0e8626f2dcb61d9cf6b3e0df95313fbd6
- SSDEEP 3072:UR8pKN/MaGJCCLfYsDu2H7Ss5IF7by4zt4LqWGZd9W0Hky2mKq/XihKRSfUIZUBq:UR4g0a3CLjH7Ss527bbt43cvKqzFQey
- TLSH
  T187745253AF23C43AEE87323911900879725D6DA02B456BC7320C6AC7B5DD7B087A7E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Rise-rat-safe-server-bundle/natives/lwjgl64.dll
- Size 365KB
- SHA256 cc609e2dfd5ae1e883377720783f475df7636c66b8ec2748733ad5ba76d4c4f3
- MD5 01ea8835697bf3e7f17bf8cf792c8ab4
- SHA1 fb0c49f1d520cc08d62db25b4239cabe07bdf73d
- SHA512 fad9ca4665a178c502d272487ef0bb06aec456a71f1a1a0d8339759955be9f560304a15d7046426abb325a28601cb5deb888b29675762c506cdefec98c317c0f
- SSDEEP 3072:1+kI6swoA3tnsOFivbBNmWa9l1sVTnwxDdT3pd3JPkBaIv0YKVFlChxm/N7M8a:1+uswoF5vbBNmWa9l1spwtkNvDKYa+
- TLSH
  T1C8847663EF63C47AEE5B323941910876712D74A01B4463C7220CAAD7F5DD7B093AAF29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Rise-rat-safe-server-bundle/natives/swresample-ttv-0.dll
- Size 352KB
- SHA256 d2e299de60803d5c4f869b45a3c9f9eff3876dd466bfc5b8071bf34ef592afea
- MD5 052592f7f5afaf2b6b470c4b94c84ca8
- SHA1 25d1923a17511a9fc1ef56c510dfb63621826274
- SHA512 b14710a6d95411023c13e54e90f53fbc1f78d7a3f3d996e4350724d434ca4b4b45659320b4d4d7e93b8b2cf518bf9796d512590f1b30c69073d5ebdea4c5e345
- SSDEEP 3072:OFTS5DqPnuK3AvKL9RD9GUyz35FIh7J7TVN6wqqKdotybndA9njSLhtNsMKVCAkp:OeDqPuPKL9RcUyz3iavt35Ak4za
- TLSH
  T1B2744C9EA7D2DE9FCA1507304DAB17213779F69027D78F1B1ED899391D23B803E82609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Rise-rat-safe-server-bundle/natives/twitchsdk.dll
- Size 1.1MB
- SHA256 e0ad573ddba8d7c6fb30a7c3f6ea7858bb0bb3b7bc5a8c7e177c84e453ce282d
- MD5 e48df0804e70ce357b31b3825f5e238e
- SHA1 0035c49d3855ba095ee89cc88e322d9c32bcd3f7
- SHA512 40ba5430e97f71d8fdad860406dc2fce8236e50413af743e29fd41c5b5e2049fd7cbf3b69b67b7d81187e4203f8769f2e19ad6e3d6ef2d6d6ce2a72f63e5979d
- SSDEEP 24576:eDIlM+NzMnoxdpXpz26C6ZZEmkvDR/Kzf:iop3EmkvlKz
- TLSH
  T14A358D20F240C136DD9D13B16938BB1E41AD79561B358AEBE6C86F5E19304D37F3AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Rise-rat-safe-server-bundle/start.cmd
- Size 1KB
- SHA256 eb2781ac380e2ee42fa3b2d1505625d31e61e1921330cc0a8f8c3acea13a6ae4
- MD5 448c3a87fd605d2dfb26e5a012aad3da
- SHA1 569444c326eb4f462ba6bea228f19b7f7fe8bd72
- SHA512 c1be465cfd217d7d6cb2106d84fd003f28c5f7470de17c2d85a61be17be29f3324260aa3c9a23e2c66a87acac78f164a69b58668e053a12e5260a0d06df7e1d9
- TLSH
  T12731335AFC0175BAA6680910B9398170F538727B0205BF79B89250D83E2C2CDDDEE2A3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24