Overview

overview

10

Static

static

75d5fd644a...5b.exe

windows7_x64

10

75d5fd644a...5b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75d5fd644a3d73d854cb3da238dfc0f3675cdee19acafd73d773b72ad66c625b

  • Size

    1016KB

  • Sample

    201127-1kgt8ep3es

  • MD5

    083591e8b186ebb55fe0f0cf222bdcdd

  • SHA1

    084375103de81a9fce81f3699f4e212f94c34bc1

  • SHA256

    75d5fd644a3d73d854cb3da238dfc0f3675cdee19acafd73d773b72ad66c625b

  • SHA512

    baf93a304667493582b7a45c212638a3b50f74dcba80cfabe46b5a7fb7dee7ac3cdc2ea7304e7f1c6933edfafeb89fb15d42f50764002183188f2828e802eb3d

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      75d5fd644a3d73d854cb3da238dfc0f3675cdee19acafd73d773b72ad66c625b

    • Size

      1016KB

    • MD5

      083591e8b186ebb55fe0f0cf222bdcdd

    • SHA1

      084375103de81a9fce81f3699f4e212f94c34bc1

    • SHA256

      75d5fd644a3d73d854cb3da238dfc0f3675cdee19acafd73d773b72ad66c625b

    • SHA512

      baf93a304667493582b7a45c212638a3b50f74dcba80cfabe46b5a7fb7dee7ac3cdc2ea7304e7f1c6933edfafeb89fb15d42f50764002183188f2828e802eb3d

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blacklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks