Overview

overview

10

Static

static

3dc57b8c1b...54.exe

windows7_x64

10

3dc57b8c1b...54.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dc57b8c1b003726285ee72400d7d0f841d42d0457febe98eb67215fbc9e2654

  • Size

    7.1MB

  • Sample

    211006-qf3rsabbd4

  • MD5

    4866d86370233b82ff2b0017221c57e2

  • SHA1

    063628db0dab74df343232a6670ee477d29e1219

  • SHA256

    3dc57b8c1b003726285ee72400d7d0f841d42d0457febe98eb67215fbc9e2654

  • SHA512

    14d061b783542303e360f19c754ecdb69f7d172c70d1156c13cac3020c014f30bff83a53e8ab4a282e0a50eedd5f12bee02c7b681f47d70c2c646e9d1a2a4b23

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      3dc57b8c1b003726285ee72400d7d0f841d42d0457febe98eb67215fbc9e2654

    • Size

      7.1MB

    • MD5

      4866d86370233b82ff2b0017221c57e2

    • SHA1

      063628db0dab74df343232a6670ee477d29e1219

    • SHA256

      3dc57b8c1b003726285ee72400d7d0f841d42d0457febe98eb67215fbc9e2654

    • SHA512

      14d061b783542303e360f19c754ecdb69f7d172c70d1156c13cac3020c014f30bff83a53e8ab4a282e0a50eedd5f12bee02c7b681f47d70c2c646e9d1a2a4b23

    Score
    10/10
    parallaxratupx

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks