Overview

overview

10

Static

static

a5c234ea0a...65.exe

windows7_x64

10

a5c234ea0a...65.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5c234ea0a6c7f122052c13209048e68ec41fdf8cccb532b2b50b59953f6d265

  • Size

    272KB

  • Sample

    220319-y6gk8sheeq

  • MD5

    c732e315809bf9f1cd03183a937d072b

  • SHA1

    b6ebe91824977c6f8b1167dd243a34120fe5c005

  • SHA256

    a5c234ea0a6c7f122052c13209048e68ec41fdf8cccb532b2b50b59953f6d265

  • SHA512

    d4e7b096798a338fbb8bc23053f6e1932cada822c9c24dd1805708a771593b2a7a1503f2a2f6b777cf7c4a0c584e4608b2f2c1b06a01542f34d37108f9aaa458

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      a5c234ea0a6c7f122052c13209048e68ec41fdf8cccb532b2b50b59953f6d265

    • Size

      272KB

    • MD5

      c732e315809bf9f1cd03183a937d072b

    • SHA1

      b6ebe91824977c6f8b1167dd243a34120fe5c005

    • SHA256

      a5c234ea0a6c7f122052c13209048e68ec41fdf8cccb532b2b50b59953f6d265

    • SHA512

      d4e7b096798a338fbb8bc23053f6e1932cada822c9c24dd1805708a771593b2a7a1503f2a2f6b777cf7c4a0c584e4608b2f2c1b06a01542f34d37108f9aaa458

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks