Overview

overview

10

Static

static

8

URLScan

urlscan

1

https://hostingshare...

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://hostingsharedservicesapi.web.app/motc.gov.qasystems/su3nnwilgeenjbuu/zh5hqfbezysxcnj8#bXJkQG1vdGMuZ292LnFh

  • Sample

    220323-mn82zsghdj

Score
10/10
plugxphishingspywarestealertrojan

Malware Config

Targets

    • Target

      https://hostingsharedservicesapi.web.app/motc.gov.qasystems/su3nnwilgeenjbuu/zh5hqfbezysxcnj8#bXJkQG1vdGMuZ292LnFh

    Score
    10/10
    plugxspywarestealertrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • PlugX Rat Payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks