General
- Target 14e7d3644d211d2c55548739da4e69c29b752db1196adc34b3f66f6f8c2c3d2c
- Size 10.7MB
- Sample260924-pr95ka1z5l
- SHA256 14e7d3644d211d2c55548739da4e69c29b752db1196adc34b3f66f6f8c2c3d2c
Score
10/10
Malware Config
Targets
-
- Target Hivatalos kérelem és a mellékelt dokumentumok jegyzéke [HU-3445-34BG22].exe
- Size 3.2MB
- SHA256 f07089eba8e1dedf0e8a3edc0b66d55e418a389c299ea9d94307372684790813
Score10/10-
Family: ParallaxRat
ParallaxRat is a multipurpose RAT written in MASM.
-
ParallaxRat payload
Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
- Target WindowsCodecs.dll
- Size 24.2MB
- SHA256 9cbd85e3e0e386d105a24669a74b907ab4c60cbfaf3651fd7adefed19afa47db
Score10/10-
Family: ParallaxRat
ParallaxRat is a multipurpose RAT written in MASM.
-
ParallaxRat payload
Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext