General
Static task
static1
URLScan task
urlscan1
Sample
https://drive.google.com/file/d/1RISyfN378Q5jlMUtytkiWnh_QKe_xdYB/view?usp=drive_web
Malware Config
Targets
-
-
Target
https://drive.google.com/file/d/1RISyfN378Q5jlMUtytkiWnh_QKe_xdYB/view?usp=drive_web
-
ParallaxRat payload
Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.
-
Drops startup file
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-