Overview

overview

10

Static

static

704c5fbb57...1f.exe

windows7_x64

10

704c5fbb57...1f.exe

windows10-2004_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
  • Size 1.8MB
  • Sample220310-b2xqbsfdgr
  • SHA256 704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
  • MD5 SHA1 SHA512
Score
10/10
plugxpersistencetrojan

Malware Config

Targets

    • Target
      704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
    • Size 1.8MB
    • SHA256 704c5fbb5766bca421e96cbfe0b4670a05fb2f09680983c2a681d45354d1421f
    • MD5 SHA1 SHA512
    Score
    10/10
    plugxpersistencetrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • PlugX Rat Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks