ParallaxRat

ParallaxRat is a multipurpose RAT written in MASM.

ParallaxRat payload

Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

suricata: ET MALWARE Parallax CnC Response Activity M14

suricata: ET MALWARE Parallax CnC Response Activity M14

Blocklisted process makes network request

Executes dropped EXE

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.