Overview

overview

10

Static

static

75ad7745e2...66.exe

windows7_x64

10

75ad7745e2...66.exe

windows10_x64

10

Resubmissions

14-04-2021 15:30

210414-3dt1t92snx 1

13-04-2021 08:27

210413-ee1n4x89p6 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75ad7745e2b81cb5ffc6d1e267b6c06f56f260452edf09ef4d6fd3ecad584e66

  • Size

    439KB

  • Sample

    210413-ee1n4x89p6

  • MD5

    d4bbe83cc2d148175032e57a362d2f38

  • SHA1

    b6984512d630c45c759e84074c6a0670bc7824cb

  • SHA256

    75ad7745e2b81cb5ffc6d1e267b6c06f56f260452edf09ef4d6fd3ecad584e66

  • SHA512

    d836629aba2cd58d65dcee5026f04501c207b6dbed00e1afbf687d08271f052381b0a6063e559fa6d1bc7dcbc1e8e6eadc14b7face091a1953f103c9c957b30d

Score
10/10
plugxpersistencetrojan

Malware Config

Targets

    • Target

      75ad7745e2b81cb5ffc6d1e267b6c06f56f260452edf09ef4d6fd3ecad584e66

    • Size

      439KB

    • MD5

      d4bbe83cc2d148175032e57a362d2f38

    • SHA1

      b6984512d630c45c759e84074c6a0670bc7824cb

    • SHA256

      75ad7745e2b81cb5ffc6d1e267b6c06f56f260452edf09ef4d6fd3ecad584e66

    • SHA512

      d836629aba2cd58d65dcee5026f04501c207b6dbed00e1afbf687d08271f052381b0a6063e559fa6d1bc7dcbc1e8e6eadc14b7face091a1953f103c9c957b30d

    Score
    10/10
    plugxpersistencetrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks