Overview

overview

10

Static

static

4f7590d426...59.exe

windows7_x64

10

4f7590d426...59.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

  • Size

    320KB

  • Sample

    220625-ferm1sefhm

  • MD5

    4cd11a2596c130a0428b7360d2be2f64

  • SHA1

    d0001afaf54b3a94f0f4bd1e2a80db56ee187d63

  • SHA256

    4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

  • SHA512

    799ddf76568e9d241070b94ca16fc2f50f872be48c50f4f97fef40b00fafba818a236664b7b68dda493ce214f35bb6592d459db14192376be085f10e67a3c962

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

    • Size

      320KB

    • MD5

      4cd11a2596c130a0428b7360d2be2f64

    • SHA1

      d0001afaf54b3a94f0f4bd1e2a80db56ee187d63

    • SHA256

      4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

    • SHA512

      799ddf76568e9d241070b94ca16fc2f50f872be48c50f4f97fef40b00fafba818a236664b7b68dda493ce214f35bb6592d459db14192376be085f10e67a3c962

    Score
    10/10
    plugxtrojan

    • Detects PlugX Payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks