Overview

overview

10

Static

static

3eeb9d9436...a8.exe

windows7_x64

10

3eeb9d9436...a8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3eeb9d943610ccf31198aefe6705c3f558d459e874b4622efa1cfe177f9101a8

  • Size

    4.0MB

  • Sample

    220320-gt2bfahhc3

  • MD5

    5ae6a04d90e7f22821a22d097ba4f8de

  • SHA1

    e50512219af472d2b6da07d498a6f055aafcce0f

  • SHA256

    3eeb9d943610ccf31198aefe6705c3f558d459e874b4622efa1cfe177f9101a8

  • SHA512

    18d59bf6324b92bed43c0b8231f52df4f23df3ae7763812a43f04a134a09d16877eca57113e6794dde9de281cce52df6ff2bf909fbcf9562e04aae17e48a388e

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      3eeb9d943610ccf31198aefe6705c3f558d459e874b4622efa1cfe177f9101a8

    • Size

      4.0MB

    • MD5

      5ae6a04d90e7f22821a22d097ba4f8de

    • SHA1

      e50512219af472d2b6da07d498a6f055aafcce0f

    • SHA256

      3eeb9d943610ccf31198aefe6705c3f558d459e874b4622efa1cfe177f9101a8

    • SHA512

      18d59bf6324b92bed43c0b8231f52df4f23df3ae7763812a43f04a134a09d16877eca57113e6794dde9de281cce52df6ff2bf909fbcf9562e04aae17e48a388e

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks