General

  • Target

    d62d2888067b3dab7d93cba362202c4a17c086c531949b071f9758866b4c9d6b

  • Size

    2.0MB

  • Sample

    211021-mby19ababl

  • MD5

    4abef812fd4cc15769b94ad459d0c5e2

  • SHA1

    bb772e658af670d38efe94d075a0c57d312af6b1

  • SHA256

    d62d2888067b3dab7d93cba362202c4a17c086c531949b071f9758866b4c9d6b

  • SHA512

    fe77e6fbba1cf74df4e080948e3c341733167e0bb70bee34aae8175188cdf31e56e00fbaf7f39f65e9d4c4c489bbaea24b0bda522b67e5a2c365a223a385af02

Malware Config

Targets

    • Target

      d62d2888067b3dab7d93cba362202c4a17c086c531949b071f9758866b4c9d6b

    • Size

      2.0MB

    • MD5

      4abef812fd4cc15769b94ad459d0c5e2

    • SHA1

      bb772e658af670d38efe94d075a0c57d312af6b1

    • SHA256

      d62d2888067b3dab7d93cba362202c4a17c086c531949b071f9758866b4c9d6b

    • SHA512

      fe77e6fbba1cf74df4e080948e3c341733167e0bb70bee34aae8175188cdf31e56e00fbaf7f39f65e9d4c4c489bbaea24b0bda522b67e5a2c365a223a385af02

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • suricata: ET MALWARE Parallax CnC Response Activity M14

      suricata: ET MALWARE Parallax CnC Response Activity M14

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks