Overview

overview

10

Static

static

f0b3b36086...79.exe

windows7_x64

10

f0b3b36086...79.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0b3b36086e58964bf4b9d655568ab5c7f798bd89e7a8581069e65f8189c0b79.exe

  • Size

    3.3MB

  • Sample

    211217-gdcm5sdher

  • MD5

    65a0ec476aaefcf6aeb328ac1641ed29

  • SHA1

    38d23c5f5cce4ef14a6eb29615494044027adb89

  • SHA256

    f0b3b36086e58964bf4b9d655568ab5c7f798bd89e7a8581069e65f8189c0b79

  • SHA512

    a7bc88b5811289e55bb5be5c771009b0c5665041c846dd9ce639d85b763b4d6912cbda476098a688cdcf0f78aa7f06fb9c8b6618c327ae6dfa7cf32fafb2e050

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      f0b3b36086e58964bf4b9d655568ab5c7f798bd89e7a8581069e65f8189c0b79.exe

    • Size

      3.3MB

    • MD5

      65a0ec476aaefcf6aeb328ac1641ed29

    • SHA1

      38d23c5f5cce4ef14a6eb29615494044027adb89

    • SHA256

      f0b3b36086e58964bf4b9d655568ab5c7f798bd89e7a8581069e65f8189c0b79

    • SHA512

      a7bc88b5811289e55bb5be5c771009b0c5665041c846dd9ce639d85b763b4d6912cbda476098a688cdcf0f78aa7f06fb9c8b6618c327ae6dfa7cf32fafb2e050

    Score
    10/10
    parallaxratupx

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks