parallax | 2793e5e5c6dabf88d5bebe53dd5a5bd8ecad007d290dd64901a6fc06cb439233

General

Target
2793e5e5c6dabf88d5bebe53dd5a5bd8ecad007d290dd64901a6fc06cb439233
Size 131KB
Sample220206-n9d96saac2
SHA256 2793e5e5c6dabf88d5bebe53dd5a5bd8ecad007d290dd64901a6fc06cb439233
MD5 1538a7e26ee76f01d4db6c37f66223a8
SHA1 4c547aa3f4e4008f9463957c846266a8f6645677
SHA512 c93f9bb26532a35a1a5b4166218be1d28e1c4b10ddf15cb65108eb532c6d1817a2b0120bd9e5d5ab3464f8af7f146cf524bc36757665316dba2b469518a0c4ec
SSDEEP 3072:0aUBnqyY8+h4YY4wHXaVLdaQXQyxBpgqYDvHAoFGT99:09BnqyY8EZBwHKVL1XQyRKvHdFGT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

parallax

ParallaxRat payload 1 IoCs

Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

resource	yara_rule
sample	parallax_rat

SHA256 2793e5e5c6dabf88d5bebe53dd5a5bd8ecad007d290dd64901a6fc06cb439233
MD5 1538a7e26ee76f01d4db6c37f66223a8
SHA1 4c547aa3f4e4008f9463957c846266a8f6645677
SHA512 c93f9bb26532a35a1a5b4166218be1d28e1c4b10ddf15cb65108eb532c6d1817a2b0120bd9e5d5ab3464f8af7f146cf524bc36757665316dba2b469518a0c4ec
SSDEEP 3072:0aUBnqyY8+h4YY4wHXaVLdaQXQyxBpgqYDvHAoFGT99:09BnqyY8EZBwHKVL1XQyRKvHdFGT
MD5 SHA1 SHA512 SSDEEP

windows x86

ParallaxRat payload

Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

Minor OS version

Major OS version

Entry point

42104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths