Overview

overview

10

Static

static

sample.exe

windows7_x64

10

sample.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    829fce14ac8b9ad293076c16a1750502c6b303123c9bd0fb17c1772330577d65.bin.sample.gz

  • Size

    1.2MB

  • Sample

    201205-hfgjkmf71j

  • MD5

    a47cad91f3c0322dc9c929cdcaa2ce55

  • SHA1

    58e310e5de767d83dcb85ffd4f51c7ec9d821637

  • SHA256

    45a2d3f5d335b45b143d0f66cf50e5478e36a104d08d328099cb14fb9f5a827d

  • SHA512

    e84119717fe4263593faa88125a60d389b73701214ed526f9151d050ab0f4a9145eea7f5783173ebd83e7e721972a0f4aa60c9140cc2d0cda18a21e4a7db4f04

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      sample

    • Size

      1.2MB

    • MD5

      33002b60b9e6fd6307e2eeaf2bcf78b6

    • SHA1

      1e641d295cbe6c6d27f03eda190e1470a83e5d98

    • SHA256

      829fce14ac8b9ad293076c16a1750502c6b303123c9bd0fb17c1772330577d65

    • SHA512

      00090799c2317aec2f16553a49ca1dcc8add6bc550f0fc4a05826aa32366b845655ed9294cbbf3dd2b0e83c6fef9bcd25e90662de36e11218fb711fe9e203c80

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks