Overview

overview

10

Static

static

13ede7e26b...49.exe

windows7-x64

10

13ede7e26b...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13ede7e26b40c2ba9de9162763fc488ec03e220f7422f885e94d935085ff8949

  • Size

    227KB

  • Sample

    221011-j8gaxseaep

  • MD5

    79dd734c547109ae9e5928abbb9acfc0

  • SHA1

    f67b2893a3d249665b86595f39f4a30099d83089

  • SHA256

    13ede7e26b40c2ba9de9162763fc488ec03e220f7422f885e94d935085ff8949

  • SHA512

    2aa189ac5de00a88d7fb8fd76b50a1b425b018e7382cb9fe1e05ac083df24f16180ed56e800d2317d89882dd590652a0cdcb78073f613795f6c81046285ff881

  • SSDEEP

    6144:xLkD+fqCNAl8aVuMULdQrdas2gQntcgMly5CjrjZZ6AnRl:xYD+iCNAl/HULdQrRfQnegMlcCjeAnRl

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      13ede7e26b40c2ba9de9162763fc488ec03e220f7422f885e94d935085ff8949

    • Size

      227KB

    • MD5

      79dd734c547109ae9e5928abbb9acfc0

    • SHA1

      f67b2893a3d249665b86595f39f4a30099d83089

    • SHA256

      13ede7e26b40c2ba9de9162763fc488ec03e220f7422f885e94d935085ff8949

    • SHA512

      2aa189ac5de00a88d7fb8fd76b50a1b425b018e7382cb9fe1e05ac083df24f16180ed56e800d2317d89882dd590652a0cdcb78073f613795f6c81046285ff881

    • SSDEEP

      6144:xLkD+fqCNAl8aVuMULdQrdas2gQntcgMly5CjrjZZ6AnRl:xYD+iCNAl/HULdQrRfQnegMlcCjeAnRl

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks