Overview

overview

10

Static

static

8

c779c44651...36.exe

windows7_x64

10

c779c44651...36.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c779c44651b3f0c11a913b74202de89dc091e5fc4f0e10eef63faaec51d57736

  • Size

    2.3MB

  • Sample

    220208-wmydjacfh2

  • MD5

    adcd1e7797068098efc7b13cdad89450

  • SHA1

    4f5cc3b2bbc0e2d3da8a8a09572708566620f6e2

  • SHA256

    c779c44651b3f0c11a913b74202de89dc091e5fc4f0e10eef63faaec51d57736

  • SHA512

    304e003325285c2c710a273e52046d0d9bc9ddbaa46c08a02d18cdb3337fff397714afcd570fe25ff972405825519de62f2fc6367966d9f4443784d0dcaac4db

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      c779c44651b3f0c11a913b74202de89dc091e5fc4f0e10eef63faaec51d57736

    • Size

      2.3MB

    • MD5

      adcd1e7797068098efc7b13cdad89450

    • SHA1

      4f5cc3b2bbc0e2d3da8a8a09572708566620f6e2

    • SHA256

      c779c44651b3f0c11a913b74202de89dc091e5fc4f0e10eef63faaec51d57736

    • SHA512

      304e003325285c2c710a273e52046d0d9bc9ddbaa46c08a02d18cdb3337fff397714afcd570fe25ff972405825519de62f2fc6367966d9f4443784d0dcaac4db

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks