plugx | talisman | Triage™

Resubmissions

21/02/2023, 10:44

29/03/2022, 09:37

Target
talisman
Size 228KB
Sample220329-llf3rahafr
SHA256 344fc6c3211e169593ab1345a5cfa9bcb46a4604fe61ab212c9316c0d72b0865
MD5 c6c6162cca729c4da879879b126d27c0
SHA1 80e5fd86127de526be75ef42ebc390fb0d559791
SHA512 8e28e787bbb5f88211657148478351807c19cc47c2a1665f802927d9d6c9c0b0b6e0fb52e424aad011cdf70464feffbb1f2929a7ba37f69d758f85b337b55bf6
SSDEEP 6144:Jwlg8I1Bc4YCqXUqU+EgLg2C9AjMCQWZuVbmTnkX4Vvg9R58TSX:ylg8I1BNYCqXUqU+EgLg2C9AjMKYbm7G
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

plugx

Detects Talisman variant of PlugX 1 IoCs

resource	yara_rule
sample	family_plugx_talisman

IMPHASH 6c0cd514bf0ee7f973a56ac40daccd05
SHA256 344fc6c3211e169593ab1345a5cfa9bcb46a4604fe61ab212c9316c0d72b0865
MD5 c6c6162cca729c4da879879b126d27c0
SHA1 80e5fd86127de526be75ef42ebc390fb0d559791
SHA512 8e28e787bbb5f88211657148478351807c19cc47c2a1665f802927d9d6c9c0b0b6e0fb52e424aad011cdf70464feffbb1f2929a7ba37f69d758f85b337b55bf6
SSDEEP 6144:Jwlg8I1Bc4YCqXUqU+EgLg2C9AjMCQWZuVbmTnkX4Vvg9R58TSX:ylg8I1BNYCqXUqU+EgLg2C9AjMKYbm7G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

184144

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths