MALWARE FAMILY

RisePro

Internal ID: win.risepro

aliases

Last seen:Mar 17, 2026

Intelligence Profile

RisePro is a stealer that is spread through downloaders like win.privateloader. Once executed on a system, the malware can steal credit card information, passwords, and personal data.

Threat Analysis

RisePro is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://any.run/cybersecurity-blog/crackedcantil-breakdown/

→https://any.run/cybersecurity-blog/risepro-malware-communication-analysis/

→https://blog.sekoia.io/new-risepro-stealer-distributed-by-the-prominent-privateloader/

→https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion

→https://embee-research.ghost.io/identifying-risepro-panels-using-censys/

→https://info.spamhaus.com/hubfs/Botnet%20Reports/Jan-Jun%202024%20Botnet%20Threat%20Update.pdf

→https://research.checkpoint.com/2024/stargazers-ghost-network/

→https://www.bitsight.com/blog/hunting-privateloader-malware-behind-installskey-ppi-service

→https://www.gdatasoftware.com/blog/2024/03/37885-risepro-stealer-campaign-github

→https://www.linkedin.com/posts/threatmon_risepro-stealer-malware-analysis-report-ugcPost-7180497665137221633-aUGL?utm_source=share&utm_medium=member_desktop

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.risepro

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search RisePro