Overview

overview

10

Static

static

3

servercry.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    servercry.exe

  • Size

    3.1MB

  • Sample

    240315-gcf9yahc7s

  • MD5

    2d329dbfe6241b54920c60b62ebac68b

  • SHA1

    6949cd11434102e727a8d7b90366b2f8e3bc0294

  • SHA256

    1aa55dd42cd313b484eb75a4b5be092bb85e03a87492c41d826f6f694da6c7d8

  • SHA512

    2a00f009d8273dd9bb90c3b6a4fc6a584a1094cb7ea0b2716a5523bdd10c60c31174ced87522b17521ef8faef73b5cc2311e499e03cbdc382a2034c5b8529af8

  • SSDEEP

    49152:Ixm7FAEjpcMiuFOWaMXjZSK7C6jMrqITCYLVpoMeWTCULvufO2RrNJlXoC:VFAEjpcMXMrq0fLVpoMaCvu9RrTlXo

Score
10/10
parallaxpersistencerat

Malware Config

Targets

    • Target

      servercry.exe

    • Size

      3.1MB

    • MD5

      2d329dbfe6241b54920c60b62ebac68b

    • SHA1

      6949cd11434102e727a8d7b90366b2f8e3bc0294

    • SHA256

      1aa55dd42cd313b484eb75a4b5be092bb85e03a87492c41d826f6f694da6c7d8

    • SHA512

      2a00f009d8273dd9bb90c3b6a4fc6a584a1094cb7ea0b2716a5523bdd10c60c31174ced87522b17521ef8faef73b5cc2311e499e03cbdc382a2034c5b8529af8

    • SSDEEP

      49152:Ixm7FAEjpcMiuFOWaMXjZSK7C6jMrqITCYLVpoMeWTCULvufO2RrNJlXoC:VFAEjpcMXMrq0fLVpoMaCvu9RrTlXo

    Score
    10/10
    parallaxpersistencerat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks