Overview

overview

10

Static

static

8

2913f80f95...81.exe

windows7_x64

10

2913f80f95...81.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2913f80f95ab29aaa2a217197233a96fb6a964cdd2fdd09e9396922b72316181

  • Size

    568KB

  • Sample

    220309-v2d3rsdhfq

  • MD5

    e5a0e5c32dec2f65548cb42db24be82a

  • SHA1

    838e5c3add083a8fa5612812b2821b05e29de982

  • SHA256

    2913f80f95ab29aaa2a217197233a96fb6a964cdd2fdd09e9396922b72316181

  • SHA512

    d1d36cb71d0001974cdb165e484391769f909f20a82970a311e93582f4e299e4d04e355cd5500f98dfe5a7a40fc4570a957745a16fd247785b553fe15a37dc8b

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      2913f80f95ab29aaa2a217197233a96fb6a964cdd2fdd09e9396922b72316181

    • Size

      568KB

    • MD5

      e5a0e5c32dec2f65548cb42db24be82a

    • SHA1

      838e5c3add083a8fa5612812b2821b05e29de982

    • SHA256

      2913f80f95ab29aaa2a217197233a96fb6a964cdd2fdd09e9396922b72316181

    • SHA512

      d1d36cb71d0001974cdb165e484391769f909f20a82970a311e93582f4e299e4d04e355cd5500f98dfe5a7a40fc4570a957745a16fd247785b553fe15a37dc8b

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks