Overview

overview

10

Static

static

ffec3bddbb...5b.exe

windows7_x64

10

ffec3bddbb...5b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffec3bddbb7b0af2ea2ba4cef9756b43adb1fdac458fd14b122ef1aefa5aa15b

  • Size

    3.4MB

  • Sample

    210128-f2xm49depj

  • MD5

    67e5b0d33aa3e8e3a88fc6281b7ffd6a

  • SHA1

    7fd03b78bad33ef23c2ae255188385c4ac071ae7

  • SHA256

    ffec3bddbb7b0af2ea2ba4cef9756b43adb1fdac458fd14b122ef1aefa5aa15b

  • SHA512

    c3f1cda6c59583ebf0b991b066904866cbc68f08aedc8a5c5aa04d08d408d514a22080abb658bca732a10c0fe49cb0cedebfe57125671b479d9c25266ac303a0

Score
10/10
parallaxransomwarerat

Malware Config

Targets

    • Target

      ffec3bddbb7b0af2ea2ba4cef9756b43adb1fdac458fd14b122ef1aefa5aa15b

    • Size

      3.4MB

    • MD5

      67e5b0d33aa3e8e3a88fc6281b7ffd6a

    • SHA1

      7fd03b78bad33ef23c2ae255188385c4ac071ae7

    • SHA256

      ffec3bddbb7b0af2ea2ba4cef9756b43adb1fdac458fd14b122ef1aefa5aa15b

    • SHA512

      c3f1cda6c59583ebf0b991b066904866cbc68f08aedc8a5c5aa04d08d408d514a22080abb658bca732a10c0fe49cb0cedebfe57125671b479d9c25266ac303a0

    Score
    10/10
    parallaxransomwarerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks