Overview

overview

10

Static

static

b51e81e445...d3.exe

windows7_x64

10

b51e81e445...d3.exe

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b51e81e44593c2c42ae412b692c46be3c6b1e4ac46c951e708618da5919403d3

  • Size

    1016KB

  • Sample

    220226-hqetpshgd3

  • MD5

    cf04ef7185ddf7d7eb50cdda20987b52

  • SHA1

    300e4d06ce151141c8b858c2a752be1fa0d53ad8

  • SHA256

    b51e81e44593c2c42ae412b692c46be3c6b1e4ac46c951e708618da5919403d3

  • SHA512

    e596a1ce2a0d24681289f7e84ed24fe70a768bdb160eda5c4c39be3dd061d1cdf0309792aef03c2944e51fc630a3f2f7aa693c1e984aef69762f4bb3d77e98e7

Score
10/10
parallaxpersistencerat

Malware Config

Targets

    • Target

      b51e81e44593c2c42ae412b692c46be3c6b1e4ac46c951e708618da5919403d3

    • Size

      1016KB

    • MD5

      cf04ef7185ddf7d7eb50cdda20987b52

    • SHA1

      300e4d06ce151141c8b858c2a752be1fa0d53ad8

    • SHA256

      b51e81e44593c2c42ae412b692c46be3c6b1e4ac46c951e708618da5919403d3

    • SHA512

      e596a1ce2a0d24681289f7e84ed24fe70a768bdb160eda5c4c39be3dd061d1cdf0309792aef03c2944e51fc630a3f2f7aa693c1e984aef69762f4bb3d77e98e7

    Score
    10/10
    parallaxpersistencerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks