Overview

overview

10

Static

static

3

inc.exe

windows7-x64

10

inc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    inc.exe

  • Size

    1.6MB

  • Sample

    230809-a8m9ssaa8y

  • MD5

    18462ea23f4eb50b95c5c3c30674f26c

  • SHA1

    052ff2ecd199f4fae7965edc8a5ae0fe45583a10

  • SHA256

    fbf003e40568ccf053e2abd44541c8a2da441970e6e59231612de39ee0d0273e

  • SHA512

    9c4f21d07afc1f4a6b7064765ee21401d914699ea3db008cd3337c86c206e110638366273f285e09823717151c0e5af394fb813e5216c16d322f3f7fdf8f2a05

  • SSDEEP

    12288:QNVVsrGvaRlb2nZS1dUpSp3fHdwBhT3eTcS5x:8VTPnZSXUpShfWBhT3ewS5

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      inc.exe

    • Size

      1.6MB

    • MD5

      18462ea23f4eb50b95c5c3c30674f26c

    • SHA1

      052ff2ecd199f4fae7965edc8a5ae0fe45583a10

    • SHA256

      fbf003e40568ccf053e2abd44541c8a2da441970e6e59231612de39ee0d0273e

    • SHA512

      9c4f21d07afc1f4a6b7064765ee21401d914699ea3db008cd3337c86c206e110638366273f285e09823717151c0e5af394fb813e5216c16d322f3f7fdf8f2a05

    • SSDEEP

      12288:QNVVsrGvaRlb2nZS1dUpSp3fHdwBhT3eTcS5x:8VTPnZSXUpShfWBhT3ewS5

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks