Overview

overview

10

Static

static

66cbd44983...82.exe

windows7-x64

10

66cbd44983...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66cbd44983655b4b5a8ef79e953411ab46abff76ea402ed3e59a2dd882503182

  • Size

    225KB

  • Sample

    221030-wb4q6scch2

  • MD5

    83006ac9fb73bc2b891f36dd2f759230

  • SHA1

    9bb28483f4c32dec5f011b01f6e7e2984253ef54

  • SHA256

    66cbd44983655b4b5a8ef79e953411ab46abff76ea402ed3e59a2dd882503182

  • SHA512

    424b98dddd25a3ddc2f0b3eb9a9abd602790dc59011c5dd97353262bf26f40c430f06e4bffa75d4270a9edc381abcd33354f55b8ef1f7ba98863a43933216b67

  • SSDEEP

    3072:ybHNCtV8kNGU/eaK0nU1E9xzjC88mwY9WDVjK6RY36/b3ZgdBUDGzr9hkWRFpVN:yb68k4U/eapU1ujlwhs6o83S55N

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      66cbd44983655b4b5a8ef79e953411ab46abff76ea402ed3e59a2dd882503182

    • Size

      225KB

    • MD5

      83006ac9fb73bc2b891f36dd2f759230

    • SHA1

      9bb28483f4c32dec5f011b01f6e7e2984253ef54

    • SHA256

      66cbd44983655b4b5a8ef79e953411ab46abff76ea402ed3e59a2dd882503182

    • SHA512

      424b98dddd25a3ddc2f0b3eb9a9abd602790dc59011c5dd97353262bf26f40c430f06e4bffa75d4270a9edc381abcd33354f55b8ef1f7ba98863a43933216b67

    • SSDEEP

      3072:ybHNCtV8kNGU/eaK0nU1E9xzjC88mwY9WDVjK6RY36/b3ZgdBUDGzr9hkWRFpVN:yb68k4U/eapU1ujlwhs6o83S55N

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks