General

  • Target

    vpn_software_x86.exe

  • Size

    2.1MB

  • Sample

    231012-15z3aseh73

  • MD5

    9a82d1499ef3649d2603780fe30db0b5

  • SHA1

    4cb9c67a5c905c93fa1fc01bcbfc166b6ef3c45f

  • SHA256

    ac0b822cda0401c0177e31bf6450de6eccf7295e0862fd1fe1cd864a39316362

  • SHA512

    f2fcd74babdb15a17f917b87ed2d7ee2d8e6bcc0a89182314e9a7401144eb4801be697bb23fd339b5dbbe7e3dfeb220ca4d00c1ffcac65e9ccd84834ce451e51

  • SSDEEP

    49152:UXsGREfMYgHug4kAjZ1/y8HQzz2xrvrdQeCVUrJnCWPbj1gXjR21pkON:UXorx6tQn1gcR

Score
10/10

Malware Config

Targets

    • Target

      vpn_software_x86.exe

    • Size

      2.1MB

    • MD5

      9a82d1499ef3649d2603780fe30db0b5

    • SHA1

      4cb9c67a5c905c93fa1fc01bcbfc166b6ef3c45f

    • SHA256

      ac0b822cda0401c0177e31bf6450de6eccf7295e0862fd1fe1cd864a39316362

    • SHA512

      f2fcd74babdb15a17f917b87ed2d7ee2d8e6bcc0a89182314e9a7401144eb4801be697bb23fd339b5dbbe7e3dfeb220ca4d00c1ffcac65e9ccd84834ce451e51

    • SSDEEP

      49152:UXsGREfMYgHug4kAjZ1/y8HQzz2xrvrdQeCVUrJnCWPbj1gXjR21pkON:UXorx6tQn1gcR

    Score
    10/10
    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

MITRE ATT&CK Enterprise v15

Tasks