Overview

overview

10

Static

static

80deed939a...in.exe

windows7_x64

1

80deed939a...in.exe

windows10_x64

10

Resubmissions

26/04/2022, 23:36

220426-3lkvdaegb610

28/02/2022, 15:52

220228-tbeqyagaar9

24/02/2022, 11:16

220224-ndfs5aebfn9

27/07/2021, 22:10

210727-kkvgchhhls9

Sharing

Copy URL Twitter E-mail

General

  • Target
    80deed939a520696968335d1bb2a9fcce7053c0156f679ba261824d0a2d44967.bin
  • Size 426KB
  • Sample210727-kkvgchhhls
  • SHA256 80deed939a520696968335d1bb2a9fcce7053c0156f679ba261824d0a2d44967
  • MD5 SHA1 SHA512
Score
10/10
plugxtrojanupx

Malware Config

Targets

    • Target
      80deed939a520696968335d1bb2a9fcce7053c0156f679ba261824d0a2d44967.bin
    • Size 426KB
    • SHA256 80deed939a520696968335d1bb2a9fcce7053c0156f679ba261824d0a2d44967
    • MD5 SHA1 SHA512
    Score
    10/10
    plugxtrojanupx

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • PlugX Rat Payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks