Overview

overview

10

Static

static

8c5659b211...f6.exe

windows7-x64

10

8c5659b211...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8c5659b211edfb6fa704b7db0ef8f86d5079c9abf3e0d26c0ea2c30c67cee5f6
  • Size 243KB
  • Sample221130-3yetwsbc9w
  • SHA256 8c5659b211edfb6fa704b7db0ef8f86d5079c9abf3e0d26c0ea2c30c67cee5f6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
plugxtrojan

Malware Config

Targets

    • Target
      8c5659b211edfb6fa704b7db0ef8f86d5079c9abf3e0d26c0ea2c30c67cee5f6
    • Size 243KB
    • SHA256 8c5659b211edfb6fa704b7db0ef8f86d5079c9abf3e0d26c0ea2c30c67cee5f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks