Overview

overview

10

Static

static

DHL_445612.exe

windows7_x64

1

DHL_445612.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL_445612.exe

  • Size

    680KB

  • Sample

    210514-847val1lkj

  • MD5

    71eb13d39ea53247b31f50215ef68a75

  • SHA1

    9c7fffc5d0aaa8e5db3ce242219b3e66a76e7f50

  • SHA256

    9e6ca1829c70d7c35efb63e7c8374e8d623068b7c9422a583992c4d49ce92672

  • SHA512

    887d35acb85270a1964efded7e8e6f5a14c5e692fd841cdf7f9fa27b18ad7dca1a652866dfd584e3f365c3ba7ceb5a5c3d6ed04919cb341d0a5b318b64cec666

Score
10/10
parallaxpersistencerat

Malware Config

Targets

    • Target

      DHL_445612.exe

    • Size

      680KB

    • MD5

      71eb13d39ea53247b31f50215ef68a75

    • SHA1

      9c7fffc5d0aaa8e5db3ce242219b3e66a76e7f50

    • SHA256

      9e6ca1829c70d7c35efb63e7c8374e8d623068b7c9422a583992c4d49ce92672

    • SHA512

      887d35acb85270a1964efded7e8e6f5a14c5e692fd841cdf7f9fa27b18ad7dca1a652866dfd584e3f365c3ba7ceb5a5c3d6ed04919cb341d0a5b318b64cec666

    Score
    10/10
    parallaxpersistencerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks