Overview

overview

10

Static

static

452e41c2ea...in.exe

windows7_x64

10

452e41c2ea...in.exe

windows10_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    452e41c2ea90d817a0a293c1a1b5f79e8e8f52ac9c74bf9c6e34a896de1408b6.bin

  • Size

    3.3MB

  • Sample

    211209-hwhsjsahh7

  • MD5

    c46bfdcee95bb995c627283835c746e3

  • SHA1

    1d61f1843b9d0a2779c2d522fa6755b55627b4f1

  • SHA256

    452e41c2ea90d817a0a293c1a1b5f79e8e8f52ac9c74bf9c6e34a896de1408b6

  • SHA512

    844a0d01ef7a832f13e428df0a594ee61aaa9f1208edbdbcdb8aefbef4573104a776b3eb766a75680c78da829dda80d68a80a6426a01165869bb8b8e228105c2

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      452e41c2ea90d817a0a293c1a1b5f79e8e8f52ac9c74bf9c6e34a896de1408b6.bin

    • Size

      3.3MB

    • MD5

      c46bfdcee95bb995c627283835c746e3

    • SHA1

      1d61f1843b9d0a2779c2d522fa6755b55627b4f1

    • SHA256

      452e41c2ea90d817a0a293c1a1b5f79e8e8f52ac9c74bf9c6e34a896de1408b6

    • SHA512

      844a0d01ef7a832f13e428df0a594ee61aaa9f1208edbdbcdb8aefbef4573104a776b3eb766a75680c78da829dda80d68a80a6426a01165869bb8b8e228105c2

    Score
    10/10
    parallaxratupx

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks