Overview

overview

10

Static

static

fdb29bbc9b...2e.exe

windows7-x64

10

fdb29bbc9b...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdb29bbc9b3257038bbb10f10140f5137e67cab3d38cf4afb60ffae54b60ab2e

  • Size

    256KB

  • Sample

    221130-q9hcyaac5s

  • MD5

    f6caa0160a6f0e5264fd16fa5ae95696

  • SHA1

    95c80857c55d62e7b641d5ce7320d4b005a6e532

  • SHA256

    fdb29bbc9b3257038bbb10f10140f5137e67cab3d38cf4afb60ffae54b60ab2e

  • SHA512

    687fcdc4800507b815cd468813f109c5a5fe374e3f42fb16a9e449bb1aa3eca5bd34869dc9eae6278dc9209dd04cb8b8dafb4ab8f1142436a4dd3b3c6877c07d

  • SSDEEP

    6144:B34cqJNXGftA+N1hvNca5UBtpBQYdzMCZf:ty0K+NxOTBQYh

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      fdb29bbc9b3257038bbb10f10140f5137e67cab3d38cf4afb60ffae54b60ab2e

    • Size

      256KB

    • MD5

      f6caa0160a6f0e5264fd16fa5ae95696

    • SHA1

      95c80857c55d62e7b641d5ce7320d4b005a6e532

    • SHA256

      fdb29bbc9b3257038bbb10f10140f5137e67cab3d38cf4afb60ffae54b60ab2e

    • SHA512

      687fcdc4800507b815cd468813f109c5a5fe374e3f42fb16a9e449bb1aa3eca5bd34869dc9eae6278dc9209dd04cb8b8dafb4ab8f1142436a4dd3b3c6877c07d

    • SSDEEP

      6144:B34cqJNXGftA+N1hvNca5UBtpBQYdzMCZf:ty0K+NxOTBQYh

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks