Overview

overview

10

Static

static

URLScan

urlscan

https://drive.google...

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://drive.google.com/file/d/1RISyfN378Q5jlMUtytkiWnh_QKe_xdYB/view?usp=drive_web
  • Sample201207-5b1fe1qvb2
Score
10/10
parallaxrat

Malware Config

Targets

    • Target
      https://drive.google.com/file/d/1RISyfN378Q5jlMUtytkiWnh_QKe_xdYB/view?usp=drive_web
    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks