Overview

overview

10

Static

static

8

fb0e29d13c...d3.exe

windows7_x64

10

fb0e29d13c...d3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb0e29d13c0d6f91a13ff92ab66aaf70200e65842d7c4ecf45b0d3afaf7d12d3

  • Size

    887KB

  • Sample

    220319-tx94zadgf6

  • MD5

    11a38e5469c9c0accdcc5c9663fee890

  • SHA1

    3ebb8eb0353703bafbe9108eff332d55f0e801b4

  • SHA256

    fb0e29d13c0d6f91a13ff92ab66aaf70200e65842d7c4ecf45b0d3afaf7d12d3

  • SHA512

    82a62d52d22b756b9ac91659c7e781123645c91a64db0daa952fabe49e20dc9bb8a8e5b71773dd9e8b5fadce1810190d5d2186ce5138127c62987aa13f6f2354

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      fb0e29d13c0d6f91a13ff92ab66aaf70200e65842d7c4ecf45b0d3afaf7d12d3

    • Size

      887KB

    • MD5

      11a38e5469c9c0accdcc5c9663fee890

    • SHA1

      3ebb8eb0353703bafbe9108eff332d55f0e801b4

    • SHA256

      fb0e29d13c0d6f91a13ff92ab66aaf70200e65842d7c4ecf45b0d3afaf7d12d3

    • SHA512

      82a62d52d22b756b9ac91659c7e781123645c91a64db0daa952fabe49e20dc9bb8a8e5b71773dd9e8b5fadce1810190d5d2186ce5138127c62987aa13f6f2354

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks