Overview

overview

10

Static

static

27fa5f7ee7...18.exe

windows7_x64

10

27fa5f7ee7...18.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27fa5f7ee78f7288fa292412f77940a2a2baac93caad5214099f52bc6bcb3218

  • Size

    26.4MB

  • Sample

    210401-xeglb4m8zs

  • MD5

    e59dc7d6a3529d9f0a380189343dee4c

  • SHA1

    205d1c4cc30bfbc37de4d168e3bc1b489ca87629

  • SHA256

    27fa5f7ee78f7288fa292412f77940a2a2baac93caad5214099f52bc6bcb3218

  • SHA512

    46624f9fbc2ade07b0ce1b2ec6f5085e5e945d3240745d37b69e8461ed19da85f7efa6ac63aec3f42bc4e1f9a8474b7765fa7a1447a7da0ff71aa299741b2bb3

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      27fa5f7ee78f7288fa292412f77940a2a2baac93caad5214099f52bc6bcb3218

    • Size

      26.4MB

    • MD5

      e59dc7d6a3529d9f0a380189343dee4c

    • SHA1

      205d1c4cc30bfbc37de4d168e3bc1b489ca87629

    • SHA256

      27fa5f7ee78f7288fa292412f77940a2a2baac93caad5214099f52bc6bcb3218

    • SHA512

      46624f9fbc2ade07b0ce1b2ec6f5085e5e945d3240745d37b69e8461ed19da85f7efa6ac63aec3f42bc4e1f9a8474b7765fa7a1447a7da0ff71aa299741b2bb3

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks