Overview

overview

10

Static

static

fc74343650...8d.exe

windows7-x64

10

fc74343650...8d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d

  • Size

    201KB

  • Sample

    221011-ea2fzsdaf5

  • MD5

    58a112ce5cc23abef38eaf0ff9c6a7a6

  • SHA1

    55112c283a850c39268c3b3fe891f50fefddd33b

  • SHA256

    fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d

  • SHA512

    46352d4a34477fe3fae49e0633b10051e9ec6d8407fe88e8d7564765e305689caf6d7a08f1e1bb20689422432f8b2a78b058cd731e4a4fb01818549bbade3bc6

  • SSDEEP

    6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFq:HqEjk7l7Fq

Score
10/10
parallaxpersistenceratupx

Malware Config

Targets

    • Target

      fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d

    • Size

      201KB

    • MD5

      58a112ce5cc23abef38eaf0ff9c6a7a6

    • SHA1

      55112c283a850c39268c3b3fe891f50fefddd33b

    • SHA256

      fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d

    • SHA512

      46352d4a34477fe3fae49e0633b10051e9ec6d8407fe88e8d7564765e305689caf6d7a08f1e1bb20689422432f8b2a78b058cd731e4a4fb01818549bbade3bc6

    • SSDEEP

      6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFq:HqEjk7l7Fq

    Score
    10/10
    parallaxpersistenceratupx

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks