Overview

overview

10

Static

static

3

authorize.exe

windows7-x64

10

authorize.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    authorize.exe

  • Size

    1.7MB

  • Sample

    230808-zzezhahd4v

  • MD5

    c906f5482d2a7d1f0ff3e6f3a945e27c

  • SHA1

    23f3894f3d3ef6bca88def2ff3320471b309d940

  • SHA256

    7d746e96a8c98fa35f66b7033350d5c800b7b9e0982409995bbdefa93c1a1cb7

  • SHA512

    ed9378c87541df0cd0516864f122d9866d3d8e1d65921df851576a409d6d503d3084e49cd3247ee62072a59d12a1a128ee07fc7936ff9e925e1b11d9c88312b2

  • SSDEEP

    12288:ANVV/rGvaRlb2nZS1dUpSp3fHwS6K68ZaAouhdKiIXZam:MVQPnZSXUpShfQxKy9urDgam

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      authorize.exe

    • Size

      1.7MB

    • MD5

      c906f5482d2a7d1f0ff3e6f3a945e27c

    • SHA1

      23f3894f3d3ef6bca88def2ff3320471b309d940

    • SHA256

      7d746e96a8c98fa35f66b7033350d5c800b7b9e0982409995bbdefa93c1a1cb7

    • SHA512

      ed9378c87541df0cd0516864f122d9866d3d8e1d65921df851576a409d6d503d3084e49cd3247ee62072a59d12a1a128ee07fc7936ff9e925e1b11d9c88312b2

    • SSDEEP

      12288:ANVV/rGvaRlb2nZS1dUpSp3fHwS6K68ZaAouhdKiIXZam:MVQPnZSXUpShfQxKy9urDgam

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks