Overview

overview

10

Static

static

509f5caf90...1f.exe

windows7_x64

10

509f5caf90...1f.exe

windows10-2004_x64

1

Resubmissions

05-04-2024 17:31

240405-v3t6daae55 3

05-02-2022 15:56

220205-tdrtaachg9 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    509f5caf90d71205d4e67c01307ac35bffe286e08a3e544f05a38eb72f149a1f

  • Size

    1.8MB

  • Sample

    220205-tdrtaachg9

  • MD5

    c94e3ed01ca75095a5814b6c35c81aa1

  • SHA1

    4edbdd78de27aa597af21ce26aca724cc32493df

  • SHA256

    509f5caf90d71205d4e67c01307ac35bffe286e08a3e544f05a38eb72f149a1f

  • SHA512

    8c62045ae1781ecc03f938627e0b1ae2c0acbd5873825b3734a37306624d18d1e4cac9b14c266f6f3020b8c3267e00c935db083811cd1286555dbca60dec0ac4

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      509f5caf90d71205d4e67c01307ac35bffe286e08a3e544f05a38eb72f149a1f

    • Size

      1.8MB

    • MD5

      c94e3ed01ca75095a5814b6c35c81aa1

    • SHA1

      4edbdd78de27aa597af21ce26aca724cc32493df

    • SHA256

      509f5caf90d71205d4e67c01307ac35bffe286e08a3e544f05a38eb72f149a1f

    • SHA512

      8c62045ae1781ecc03f938627e0b1ae2c0acbd5873825b3734a37306624d18d1e4cac9b14c266f6f3020b8c3267e00c935db083811cd1286555dbca60dec0ac4

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks