RisePro Malware Analysis: Exploring C2 Communication of a New Version

RisePro is a malware-as-a-service info-stealer, first identified in 2022. Recently, we’ve detected a spike in it’s activity and decided to conduct an investigation, which led to interesting findings. 

RisePro is a well-documented malware, but we quickly realized that the network traffic patterns of our samples did not match the existing literature. It seemed like we had a new version on our hands. 

Further analysis revealed that RisePro changed the way it communicates with C2 and that it has gained new …

analysis as-a-service communication findings info investigation led malware malware analysis malware-as-a-service network network traffic patterns quickly risepro service stealer traffic version