General

  • Target

    befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6

  • Size

    135KB

  • MD5

    74668e84ee38695216ef737f389dc55c

  • SHA1

    e4d6928f6592a2a38d880cff7e0f30db2a15896e

  • SHA256

    befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6

  • SHA512

    90a550498a77284e5a936d92513994976ed5b67ffd8f5ca1476570f1c7307f69ed8400e86ab2588d24c77df66279daca98e4735b1b650cf46770093a7d1b8c24

  • SSDEEP

    1536:fS0nQkNkx7AeJRhNUoCthFYJmw44uh9nVJUWlDYnyrCo5CqydiEz1t4PpZnM+zg:zNelNEvKWZYKika1t4PpZ/bVn7CX

Score
10/10

Malware Config

Extracted

Family

plugx

C2

rainydaysweb.com:80

rainydaysweb.com:443

rainydaysweb.com:53

Mutex

dhHRYvLNaOVJXZdDsbdc

Attributes
  • folder

    AAM UpdatesblF

Signatures

Files

  • befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6
    .dll windows x86

    75c054ac1bbae1f166a73824a11d5efa


    Code Sign

    Headers

    Imports

    Exports

    Sections