Overview

overview

10

Static

static

5190e1a718...0c.exe

windows7_x64

10

5190e1a718...0c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5190e1a71856cab812f3ae7fca561216355fb65740106f8467486ded57c5e30c

  • Size

    2.2MB

  • Sample

    220506-jw4wfshfa3

  • MD5

    c20752230ee0772a5ceba41aad6130e5

  • SHA1

    040e6bcc3332eb297878cf5eb5f6f71436958d11

  • SHA256

    5190e1a71856cab812f3ae7fca561216355fb65740106f8467486ded57c5e30c

  • SHA512

    0f1af93116997a36b7a3ef1348717173afa901995fd0f1a792fb5303eb66baa3f3e93b566a9ee56bdce4784284582319b54829123d925292dcaad6affb1505ea

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      5190e1a71856cab812f3ae7fca561216355fb65740106f8467486ded57c5e30c

    • Size

      2.2MB

    • MD5

      c20752230ee0772a5ceba41aad6130e5

    • SHA1

      040e6bcc3332eb297878cf5eb5f6f71436958d11

    • SHA256

      5190e1a71856cab812f3ae7fca561216355fb65740106f8467486ded57c5e30c

    • SHA512

      0f1af93116997a36b7a3ef1348717173afa901995fd0f1a792fb5303eb66baa3f3e93b566a9ee56bdce4784284582319b54829123d925292dcaad6affb1505ea

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks