Overview

overview

10

Static

static

8

30296a1aab...5c.exe

windows7_x64

10

30296a1aab...5c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30296a1aab16dd65d0c66e283833c31b1c77151507ef7201580c35a64b49995c

  • Size

    645KB

  • Sample

    220502-ccnlsseccl

  • MD5

    e68e0aebbf004b1fd55018a03e3b634f

  • SHA1

    e97810b8a8f700dc7cdf284e774d74e975686d87

  • SHA256

    30296a1aab16dd65d0c66e283833c31b1c77151507ef7201580c35a64b49995c

  • SHA512

    38da5d322a435a5ac2e2f6a322dbbff4f01a2d3a8b639aafde72000126bcfb8937f242570c334c819ad5728c5402cdd97a12750eef37ce8173c3b31950b2498a

Score
10/10
parallaxratupx

Malware Config

Targets

    • Target

      30296a1aab16dd65d0c66e283833c31b1c77151507ef7201580c35a64b49995c

    • Size

      645KB

    • MD5

      e68e0aebbf004b1fd55018a03e3b634f

    • SHA1

      e97810b8a8f700dc7cdf284e774d74e975686d87

    • SHA256

      30296a1aab16dd65d0c66e283833c31b1c77151507ef7201580c35a64b49995c

    • SHA512

      38da5d322a435a5ac2e2f6a322dbbff4f01a2d3a8b639aafde72000126bcfb8937f242570c334c819ad5728c5402cdd97a12750eef37ce8173c3b31950b2498a

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks