Overview

overview

10

Static

static

505aa5b6bf...dd.exe

windows7_x64

10

505aa5b6bf...dd.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    505aa5b6bf77290ec7ccdd2b24b8ff8ef779f01d57ad690f632d8b2736f2a8dd

  • Size

    2.7MB

  • Sample

    220205-tejt3adccr

  • MD5

    5774817a431cf389bbbf1d9a2b48e9ad

  • SHA1

    ef6e9aacde563df50771cf5037d6cd4bd1b7a470

  • SHA256

    505aa5b6bf77290ec7ccdd2b24b8ff8ef779f01d57ad690f632d8b2736f2a8dd

  • SHA512

    bf6ec01eab4b04c9f3c43c4f4c9eb4885125b1e80d47452b46a54890da95bc146f33024f264cc9a84060310a311b0aa6b227dedbe145eaca97f40814dc0f9bee

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      505aa5b6bf77290ec7ccdd2b24b8ff8ef779f01d57ad690f632d8b2736f2a8dd

    • Size

      2.7MB

    • MD5

      5774817a431cf389bbbf1d9a2b48e9ad

    • SHA1

      ef6e9aacde563df50771cf5037d6cd4bd1b7a470

    • SHA256

      505aa5b6bf77290ec7ccdd2b24b8ff8ef779f01d57ad690f632d8b2736f2a8dd

    • SHA512

      bf6ec01eab4b04c9f3c43c4f4c9eb4885125b1e80d47452b46a54890da95bc146f33024f264cc9a84060310a311b0aa6b227dedbe145eaca97f40814dc0f9bee

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks