Overview

overview

10

Static

static

10

plugx_decr...in.dll

windows7_x64

10

plugx_decr...in.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    plugx_decrypted_dll.bin
  • Size 160KB
  • Sample200827-ltl1v96efj
  • SHA256 f631e8f0c723cccbc5b26387f4100351de2e158b6770e962733734be6ca119d5
  • MD5 SHA1 SHA512
Score
10/10
plugxtrojan

Malware Config

Extracted

Family

  • plugx

C2

  • 103.192.226.100:80

  • 103.192.226.100:110

  • 103.192.226.100:8080

  • 103.192.226.100:5938

Mutex

  • aLdsgqoIdspsJDPFgwvZ

Attributes
  • folder

    AvastSvctle

Targets

    • Target
      plugx_decrypted_dll.bin
    • Size 160KB
    • SHA256 f631e8f0c723cccbc5b26387f4100351de2e158b6770e962733734be6ca119d5
    • MD5 SHA1 SHA512
    Score
    10/10
    plugxtrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks