Overview

overview

10

Static

static

8

83ce49568e...ce.exe

windows7_x64

7

83ce49568e...ce.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83ce49568eda2b4a7f66888463e3bbc0f6dcc1123718fb5f1a9be8e13a3c11ce

  • Size

    618KB

  • Sample

    201127-133jlvst66

  • MD5

    fd271d9e9226304745461177b444fdbc

  • SHA1

    b86892f176e96f68346578cd48ba284881a76471

  • SHA256

    83ce49568eda2b4a7f66888463e3bbc0f6dcc1123718fb5f1a9be8e13a3c11ce

  • SHA512

    f8224d2b54daff4b93e91256430bfc3356c8e7a76c918a953f6332125d0c84d85612991110a067bd373f1856dc8e10a30ab0ff3283c59951ecf16e00ddd09895

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      83ce49568eda2b4a7f66888463e3bbc0f6dcc1123718fb5f1a9be8e13a3c11ce

    • Size

      618KB

    • MD5

      fd271d9e9226304745461177b444fdbc

    • SHA1

      b86892f176e96f68346578cd48ba284881a76471

    • SHA256

      83ce49568eda2b4a7f66888463e3bbc0f6dcc1123718fb5f1a9be8e13a3c11ce

    • SHA512

      f8224d2b54daff4b93e91256430bfc3356c8e7a76c918a953f6332125d0c84d85612991110a067bd373f1856dc8e10a30ab0ff3283c59951ecf16e00ddd09895

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blacklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks