Overview

overview

10

Static

static

291976ba47...23.exe

windows7-x64

10

291976ba47...23.exe

windows10-2004-x64

10

Resubmissions

30-11-2022 10:29

221130-mh85sscb27 10

29-11-2022 18:19

221129-wx7d7adc83 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    291976ba47cec4b3c0e31cbc50ab1923.exe.bin.zip

  • Size

    178KB

  • Sample

    221130-mh85sscb27

  • MD5

    f568ba040d9a3b8cd9e476ee00f62d50

  • SHA1

    837169a51cf33d14a83a5c78c60013d3ccef6ef5

  • SHA256

    0190df1144170decd85fc69c5d6b6ba1b96777a5dbd733368290f93e1d94be68

  • SHA512

    fd357e68feda16f2e2763c4a0aab62d2044287896b20f633ca3d73d50d3f2857773145b180de395e01b2c74e643e3eaa0905b467e80e78e5a98f9970fd44babe

  • SSDEEP

    3072:zh/R0tYS40G2zBxebpnRbNRt7NN+wLqRNt1d5dsj401B+5iTSr93Qh6mD:zhJ1S40GcBxqRbfpL+KqRX1Cj401BkiV

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      291976ba47cec4b3c0e31cbc50ab1923.exe.bin

    • Size

      236KB

    • MD5

      291976ba47cec4b3c0e31cbc50ab1923

    • SHA1

      38273b08bd046fc29bd777c9dc4a177ae162b5f8

    • SHA256

      a78dbafaca4813307529cafbed554b53a622a639941f2e66520bbb92769ee960

    • SHA512

      0b44f02c9d37ba25b9988146bf9a516b65625ed7184c4188689eb4056945cd56e86180e21d7b157faff6acdf4991eec51b18c8d83f084652ef574b0d7ec4158b

    • SSDEEP

      3072:1H5VhrQrb6DvbqJMikwRz2Og2QTAxQ4Vt6r+CtbmMjxm8qyCz/xwDSpa:1ZkFkw1vgfCVt6r+l18qjp6Sp

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks