Overview

overview

10

Static

static

packing list.xlsx.scr

windows7_x64

10

packing list.xlsx.scr

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d6e17c9b63c736c6380bc367b09572c9adc95e916c275296d0692a81191f242

  • Size

    401KB

  • Sample

    220502-smv2mafhd8

  • MD5

    5fcb322ff0ed7eabe10145fa4cf78768

  • SHA1

    6ed684a8fbb8d317e2c7ac00db284af35431510a

  • SHA256

    8d6e17c9b63c736c6380bc367b09572c9adc95e916c275296d0692a81191f242

  • SHA512

    50ace1fadda9199c54ba011d9fb59a0231612d350435311bfee33046d706f3fffc8159cb5c5b85703e08475a4c7907c5858629dee1c3e5bae80998bac7654ef1

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      packing list.xlsx.scr

    • Size

      1.3MB

    • MD5

      4d0a93f479c185879347cff75337de5f

    • SHA1

      ff8159da86f6a43d07831c31b3b702375e71edf5

    • SHA256

      464b01b713a4c97b736dae0ea19855e97a172e7c11e9f7fe9ac0e054326c340c

    • SHA512

      1b4cf2d3df76552bb06e0fed18806911e2e19b545f076f3164532edd36f69ab22ad4c219e84b1f1b68aa5c4cdbeba356a161b71da0be3b95c54ea128fb427c42

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks