Overview

overview

10

Static

static

cd41b2a08b...eb.exe

windows7-x64

10

cd41b2a08b...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd41b2a08b3b38cd8ce7a2420a635bd1d1780bce12218f93ee6f2366a19e2aeb

  • Size

    350KB

  • Sample

    220724-zjwbjsfga2

  • MD5

    0042ed673ace6ada1be98d420fd4b20d

  • SHA1

    ddb1c86576679bebeeacccbb5bd0abd3f3700b7a

  • SHA256

    cd41b2a08b3b38cd8ce7a2420a635bd1d1780bce12218f93ee6f2366a19e2aeb

  • SHA512

    5beac2451ab5f589989c50dafb0efff8221b4cd96929652acb9ae442b8f685eb493e3cc2a5eadc491de4eb9a160a1cc84b4e73d718e5632675fa3546be1a7f4d

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      cd41b2a08b3b38cd8ce7a2420a635bd1d1780bce12218f93ee6f2366a19e2aeb

    • Size

      350KB

    • MD5

      0042ed673ace6ada1be98d420fd4b20d

    • SHA1

      ddb1c86576679bebeeacccbb5bd0abd3f3700b7a

    • SHA256

      cd41b2a08b3b38cd8ce7a2420a635bd1d1780bce12218f93ee6f2366a19e2aeb

    • SHA512

      5beac2451ab5f589989c50dafb0efff8221b4cd96929652acb9ae442b8f685eb493e3cc2a5eadc491de4eb9a160a1cc84b4e73d718e5632675fa3546be1a7f4d

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks