Overview

overview

10

Static

static

6

1f54c4b578...f2.exe

windows7_x64

10

1f54c4b578...f2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f54c4b578cdcaf15c817f18ee715a8cf2b7944c44e268ae8fa8bc9427922bf2

  • Size

    3.2MB

  • Sample

    210204-d2crsm5yle

  • MD5

    e890b231731a69c7fcc252bf6d8b59d6

  • SHA1

    74d0fb7d0d4f6e314e8cb92a506bbc3e33fad2cd

  • SHA256

    1f54c4b578cdcaf15c817f18ee715a8cf2b7944c44e268ae8fa8bc9427922bf2

  • SHA512

    0751518e5ca71f023b6f0b09f48168ebfd9d2fa97c1ae4be70eddfc672517515b3b36a913e540a74fdd13edb958bfc341f1f6a7a86104c13cf9d7d9673085c86

Score
10/10
parallaxransomwarerat

Malware Config

Targets

    • Target

      1f54c4b578cdcaf15c817f18ee715a8cf2b7944c44e268ae8fa8bc9427922bf2

    • Size

      3.2MB

    • MD5

      e890b231731a69c7fcc252bf6d8b59d6

    • SHA1

      74d0fb7d0d4f6e314e8cb92a506bbc3e33fad2cd

    • SHA256

      1f54c4b578cdcaf15c817f18ee715a8cf2b7944c44e268ae8fa8bc9427922bf2

    • SHA512

      0751518e5ca71f023b6f0b09f48168ebfd9d2fa97c1ae4be70eddfc672517515b3b36a913e540a74fdd13edb958bfc341f1f6a7a86104c13cf9d7d9673085c86

    Score
    10/10
    parallaxransomwarerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Drops startup file

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks