Overview

overview

10

Static

static

9e9ad2a3d6...e3.exe

windows7_x64

10

9e9ad2a3d6...e3.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e9ad2a3d696f2327d702b58c5f0329caddce1571d842ecc9ca02f3f23677ae3

  • Size

    6.7MB

  • Sample

    210301-cl1d49h29n

  • MD5

    e7955b7487f9be142b49b64aa511bc7a

  • SHA1

    6c644f1ca1226feaec45935e890504ac154d183c

  • SHA256

    9e9ad2a3d696f2327d702b58c5f0329caddce1571d842ecc9ca02f3f23677ae3

  • SHA512

    e8c49950a6101c7d3cc73c6efd7343a84da2c293012eb7c33777244d1ed9c1b344d46ff81c691ad6c5ed2103cd51dbdd16fa73b9dbc93df07b3c0417e206b502

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      9e9ad2a3d696f2327d702b58c5f0329caddce1571d842ecc9ca02f3f23677ae3

    • Size

      6.7MB

    • MD5

      e7955b7487f9be142b49b64aa511bc7a

    • SHA1

      6c644f1ca1226feaec45935e890504ac154d183c

    • SHA256

      9e9ad2a3d696f2327d702b58c5f0329caddce1571d842ecc9ca02f3f23677ae3

    • SHA512

      e8c49950a6101c7d3cc73c6efd7343a84da2c293012eb7c33777244d1ed9c1b344d46ff81c691ad6c5ed2103cd51dbdd16fa73b9dbc93df07b3c0417e206b502

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks