parallax | 58e6364e6a138612394c0d17375145c93405dbb84b60e14c834d72610a3bf94d | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
16-02-2023 21:16

Sharing

Report Analysis Logs

General

Target

58e6364e6a138612394c0d17375145c93405dbb84b60e14c834d72610a3bf94d.exe
Size

3.0MB
MD5

3a783634035ccf32cbc1c2ebb905a540
SHA1

bc9893de6d5fa71e628072bbb4358659464cbda4
SHA256

58e6364e6a138612394c0d17375145c93405dbb84b60e14c834d72610a3bf94d
SHA512

e887f38dc37ddadb2dad881c144e8939f78c73632d18bbacfe3faae43e8a9a6d1c6b867326fa18de4b29a5ba2a1d2b6b459397d40bcfb05857d61559eebbfb47
SSDEEP

98304:pCYpc/K30ia81fRhArmGOklCqW3DXjzsSXMM8NJ:pCYISnAbVWzXjzssMMS

Score

10^/10

parallax discovery rat

Malware Config

Signatures

ParallaxRat
ParallaxRat is a multipurpose RAT written in MASM.
rat parallax
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\58e6364e6a138612394c0d17375145c93405dbb84b60e14c834d72610a3bf94d.exe
"C:\Users\Admin\AppData\Local\Temp\58e6364e6a138612394c0d17375145c93405dbb84b60e14c834d72610a3bf94d.exe"
1⤵
PID:980

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/980-54-0x0000000075811000-0x0000000075813000-memory.dmp

Filesize
8KB

Download