Overview

overview

10

Static

static

6f8fc53995...25.exe

windows7_x64

10

6f8fc53995...25.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6f8fc539952555b057adf7810aca782a29f8f624e1d46a0f4732db3763130725
  • Size 5.2MB
  • Sample210222-wd89qse42e
  • SHA256 6f8fc539952555b057adf7810aca782a29f8f624e1d46a0f4732db3763130725
  • MD5 SHA1 SHA512
Score
10/10
parallaxrat

Malware Config

Targets

    • Target
      6f8fc539952555b057adf7810aca782a29f8f624e1d46a0f4732db3763130725
    • Size 5.2MB
    • SHA256 6f8fc539952555b057adf7810aca782a29f8f624e1d46a0f4732db3763130725
    • MD5 SHA1 SHA512
    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks