Overview

overview

10

Static

static

a352d00e03...5d.exe

windows7_x64

10

a352d00e03...5d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a352d00e0322a0e397f167c1164f7667c672935ba14d29c4f4b60f26d0a88f5d

  • Size

    557KB

  • Sample

    220625-v47g4afge5

  • MD5

    11db2be72948149d039223e80f20c7bb

  • SHA1

    f3c8ad546a0830a6d5eae197ef812479b1520696

  • SHA256

    a352d00e0322a0e397f167c1164f7667c672935ba14d29c4f4b60f26d0a88f5d

  • SHA512

    38457af6ec05d23d5851ec2f7d7f0e281fd9634df2d44a50db1a75c73c4e8c42bacfd7e77445f83a981e479dbb1cd27250f450900d05bef37f701f590c7bc91a

Score
10/10
parallaxpersistencerat

Malware Config

Targets

    • Target

      a352d00e0322a0e397f167c1164f7667c672935ba14d29c4f4b60f26d0a88f5d

    • Size

      557KB

    • MD5

      11db2be72948149d039223e80f20c7bb

    • SHA1

      f3c8ad546a0830a6d5eae197ef812479b1520696

    • SHA256

      a352d00e0322a0e397f167c1164f7667c672935ba14d29c4f4b60f26d0a88f5d

    • SHA512

      38457af6ec05d23d5851ec2f7d7f0e281fd9634df2d44a50db1a75c73c4e8c42bacfd7e77445f83a981e479dbb1cd27250f450900d05bef37f701f590c7bc91a

    Score
    10/10
    parallaxpersistencerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks