Overview

overview

10

Static

static

2b3f17b4b7...d7.exe

windows7_x64

10

2b3f17b4b7...d7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b3f17b4b7e8e5948ba62005b56c97632dc471eec2800ee1f42dc40d722177d7

  • Size

    106KB

  • Sample

    220330-rxe8gscgh3

  • MD5

    ef597052379d2cd098641c3c167bdd73

  • SHA1

    22f037904c15335f912e3a0c34050accc6d82ad9

  • SHA256

    2b3f17b4b7e8e5948ba62005b56c97632dc471eec2800ee1f42dc40d722177d7

  • SHA512

    fd02c58016173eb4095a4f8b138ad84d934fd4a9c94bf43baf298ff179558c304b822e5bff68427317fc6b5c62728eef738c1d122394de751d2c84833163d06a

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      2b3f17b4b7e8e5948ba62005b56c97632dc471eec2800ee1f42dc40d722177d7

    • Size

      106KB

    • MD5

      ef597052379d2cd098641c3c167bdd73

    • SHA1

      22f037904c15335f912e3a0c34050accc6d82ad9

    • SHA256

      2b3f17b4b7e8e5948ba62005b56c97632dc471eec2800ee1f42dc40d722177d7

    • SHA512

      fd02c58016173eb4095a4f8b138ad84d934fd4a9c94bf43baf298ff179558c304b822e5bff68427317fc6b5c62728eef738c1d122394de751d2c84833163d06a

    Score
    10/10
    plugxtrojan

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • PlugX Rat Payload

    • Executes dropped EXE

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks