Overview

overview

10

Static

static

c8a0556f80...b7.exe

windows7_x64

10

c8a0556f80...b7.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8a0556f803e6e456cfea037885f007dba3b69287459562324460829c57380b7

  • Size

    3.3MB

  • Sample

    210128-885vhksgxx

  • MD5

    1b99a6a9c0905e6d87ead147a5ca11ce

  • SHA1

    abff2d68a4ffa3a60b89a62e5aed2e9251c864c8

  • SHA256

    c8a0556f803e6e456cfea037885f007dba3b69287459562324460829c57380b7

  • SHA512

    3ec41b43e4eed9d02b49228ca6470fc8038c033a7ae4d8b4197ef9807872de1d99fa9e486d5397edb140b05ae529c772d080c284f77ab43be644751d30440472

Score
10/10
parallaxransomwarerat

Malware Config

Targets

    • Target

      c8a0556f803e6e456cfea037885f007dba3b69287459562324460829c57380b7

    • Size

      3.3MB

    • MD5

      1b99a6a9c0905e6d87ead147a5ca11ce

    • SHA1

      abff2d68a4ffa3a60b89a62e5aed2e9251c864c8

    • SHA256

      c8a0556f803e6e456cfea037885f007dba3b69287459562324460829c57380b7

    • SHA512

      3ec41b43e4eed9d02b49228ca6470fc8038c033a7ae4d8b4197ef9807872de1d99fa9e486d5397edb140b05ae529c772d080c284f77ab43be644751d30440472

    Score
    10/10
    parallaxransomwarerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks