parallax | 728087f0de4d37e5a8a4085fbb9e4de2105d8062b84070b2be4e088f5693359b

General

Target
728087f0de4d37e5a8a4085fbb9e4de2105d8062b84070b2be4e088f5693359b
Size 172KB
Sample220206-n799tsabam
SHA256 728087f0de4d37e5a8a4085fbb9e4de2105d8062b84070b2be4e088f5693359b
MD5 b58768f7953caf0ef531e45e46f57a28
SHA1 b277dd92baee01d32120f763ffce7067166e4391
SHA512 9391c24113d740aea2b92b9dd4db9de402db34b67d6be30c423a06a8153b66a9b97251e445cc75e9b000becd0c34019472c0370ad69ad2440b2e069aa09459f7
SSDEEP 3072:ovfgV8WTMx1Kd98zZk1Zu+7FbqwoN8Q5oNVjIlFLDrr/Ln:ovfm8WTMxK8zZJ4FbqwoN8Q5VbrH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

parallax

ParallaxRat payload 1 IoCs

Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

resource	yara_rule
sample	parallax_rat

SHA256 728087f0de4d37e5a8a4085fbb9e4de2105d8062b84070b2be4e088f5693359b
MD5 b58768f7953caf0ef531e45e46f57a28
SHA1 b277dd92baee01d32120f763ffce7067166e4391
SHA512 9391c24113d740aea2b92b9dd4db9de402db34b67d6be30c423a06a8153b66a9b97251e445cc75e9b000becd0c34019472c0370ad69ad2440b2e069aa09459f7
SSDEEP 3072:ovfgV8WTMx1Kd98zZk1Zu+7FbqwoN8Q5oNVjIlFLDrr/Ln:ovfm8WTMxK8zZJ4FbqwoN8Q5VbrH
MD5 SHA1 SHA512 SSDEEP

windows x86

ParallaxRat payload

Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

Minor OS version

Major OS version

Entry point

42021

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths