Overview

overview

10

Static

static

8219311bc9...c4.exe

windows7-x64

10

8219311bc9...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8219311bc99c105c1edc420fbcd2067ea839b499248e1c45b31596161a76c4c4

  • Size

    1.4MB

  • Sample

    221201-jh8mgsgd62

  • MD5

    c9ddc48f08e3678e2a4e65d4951dc261

  • SHA1

    7b2e70ecdf86e9461f0cb4e6aeb37cae893bcfa5

  • SHA256

    8219311bc99c105c1edc420fbcd2067ea839b499248e1c45b31596161a76c4c4

  • SHA512

    cfa8b15fa6df43f47a63085382f18c8f2a9f170781c54c52f4ca584924c601f7664ea113ee2b103fd3e288179cc709b0fee1830c9cea868400c28c32fbb43825

  • SSDEEP

    24576:jxdW2AUOoj6Rc4FoweN2vtUm5a4j06/b9y8lDbe+Eltpe3f:dZA4BEoZsh5ayFy8lU6f

Score
10/10
parallaxpersistenceratupx

Malware Config

Targets

    • Target

      8219311bc99c105c1edc420fbcd2067ea839b499248e1c45b31596161a76c4c4

    • Size

      1.4MB

    • MD5

      c9ddc48f08e3678e2a4e65d4951dc261

    • SHA1

      7b2e70ecdf86e9461f0cb4e6aeb37cae893bcfa5

    • SHA256

      8219311bc99c105c1edc420fbcd2067ea839b499248e1c45b31596161a76c4c4

    • SHA512

      cfa8b15fa6df43f47a63085382f18c8f2a9f170781c54c52f4ca584924c601f7664ea113ee2b103fd3e288179cc709b0fee1830c9cea868400c28c32fbb43825

    • SSDEEP

      24576:jxdW2AUOoj6Rc4FoweN2vtUm5a4j06/b9y8lDbe+Eltpe3f:dZA4BEoZsh5ayFy8lU6f

    Score
    10/10
    parallaxpersistenceratupx

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks