Overview

overview

10

Static

static

8

b4dfa03a75...3.xlsm

windows7_x64

10

b4dfa03a75...3.xlsm

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b4dfa03a75594d4eb89ee173a82f976245ef874079ffa9359c748d5ee9ff5d33
  • Size 1.6MB
  • Sample220329-3eqgaaghbr
  • SHA256 b4dfa03a75594d4eb89ee173a82f976245ef874079ffa9359c748d5ee9ff5d33
  • MD5 SHA1 SHA512
Score
10/10
plugxmacrotrojan

Malware Config

Targets

    • Target
      b4dfa03a75594d4eb89ee173a82f976245ef874079ffa9359c748d5ee9ff5d33
    • Size 1.6MB
    • SHA256 b4dfa03a75594d4eb89ee173a82f976245ef874079ffa9359c748d5ee9ff5d33
    • MD5 SHA1 SHA512
    Score
    10/10
    plugxtrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • PlugX Rat Payload

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Executes dropped EXE

    • Loads dropped DLL

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks