Overview

overview

10

Static

static

1

Receipt & ...ms.exe

windows7_x64

10

Receipt & ...ms.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45b8a42abc17d301e0d5579d66ae18eca3c57abad112c490a96a7f74aaed9ec0

  • Size

    358KB

  • Sample

    220205-tt369addhr

  • MD5

    a179b84dae3919e0dd65aa2a0fac50cf

  • SHA1

    457836ab2ec79a4d3fc45498424ac6906b63adba

  • SHA256

    45b8a42abc17d301e0d5579d66ae18eca3c57abad112c490a96a7f74aaed9ec0

  • SHA512

    153a8adcc64a55b146901e6504338852c9893f01e3a4805613157d1d2e2be1c1d89df5bbd444cec0519e314d9a679d9482944847ee2308e9b83ad66ab05de17d

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      Receipt & Shipment Forms.exe

    • Size

      305KB

    • MD5

      f3bb82503577a06717fec42e054e9eea

    • SHA1

      340a20bcc520d09ec3d75d4c0956d308e70ce1be

    • SHA256

      58771cc09ce9d567219c04810586c153995aa51e139a9ced561824a1e16df453

    • SHA512

      2ad8fbbf3fef6e225fc8ba9d66472045b05ded0f64a79e5a1b226661bbc1f94952cc713216ffc21a9baf5c6e6bde46cecdf2eef228b99444a451127319c04b1f

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks