plugx | 2af2df94e6e7593a01c50bf5c918bb173505d11f93005123f91556a0744d8ae8 | Triage

Sharing

General

Target

6d1cb46ce841690d2e677e69bc40c180b336556e
Size

4.0MB
Sample

210409-efzhqhtzma
MD5

8dd31d0668133c738006351a48b6d61f
SHA1

6d1cb46ce841690d2e677e69bc40c180b336556e
SHA256

2af2df94e6e7593a01c50bf5c918bb173505d11f93005123f91556a0744d8ae8
SHA512

d2e71de6184a9ea79caebd8ec425f431daea715102445e1fc3d98251adf1e7c628655daefa8ba843437fbe4e612628b8c6f1f61bfea012708fdab4cb1d3a9a18

Score

10^/10

plugx trojan

Malware Config

Targets

- Target
  
  6d1cb46ce841690d2e677e69bc40c180b336556e
- Size
  
  4.0MB
- MD5
  
  8dd31d0668133c738006351a48b6d61f
- SHA1
  
  6d1cb46ce841690d2e677e69bc40c180b336556e
- SHA256
  
  2af2df94e6e7593a01c50bf5c918bb173505d11f93005123f91556a0744d8ae8
- SHA512
  
  d2e71de6184a9ea79caebd8ec425f431daea715102445e1fc3d98251adf1e7c628655daefa8ba843437fbe4e612628b8c6f1f61bfea012708fdab4cb1d3a9a18
Score

10^/10

plugx trojan
- PlugX
  PlugX is a RAT (Remote Access Trojan) that has been around since 2008.
  trojan plugx
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2