Overview

overview

10

Static

static

d91807db68...e8.exe

windows7-x64

10

d91807db68...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d91807db680531bc9f41c4d56229558f39f04c0adef4448be9d5b4691eb919e8

  • Size

    252KB

  • Sample

    221130-rnx2yabe9v

  • MD5

    f68008057ff5dbc67c938b3f5f68a54d

  • SHA1

    03347080f09deb58f7059a4774da66c3f71890c3

  • SHA256

    d91807db680531bc9f41c4d56229558f39f04c0adef4448be9d5b4691eb919e8

  • SHA512

    0baccb957a9dc955868226665f6fd7bd938d18191e6c364c5c062887378001b0ea286921cca005005cdda307455afc1e70590a18695aa7921a76cb60bff3b9d5

  • SSDEEP

    3072:Wk/G2ulyaBYjv/1AnfZoGe9vf95ZKzrde6z2CTaK124CSbUeG7zMCnZf9v:W72+GL9An+ZfPA1SKklSbUHzMCZf

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      d91807db680531bc9f41c4d56229558f39f04c0adef4448be9d5b4691eb919e8

    • Size

      252KB

    • MD5

      f68008057ff5dbc67c938b3f5f68a54d

    • SHA1

      03347080f09deb58f7059a4774da66c3f71890c3

    • SHA256

      d91807db680531bc9f41c4d56229558f39f04c0adef4448be9d5b4691eb919e8

    • SHA512

      0baccb957a9dc955868226665f6fd7bd938d18191e6c364c5c062887378001b0ea286921cca005005cdda307455afc1e70590a18695aa7921a76cb60bff3b9d5

    • SSDEEP

      3072:Wk/G2ulyaBYjv/1AnfZoGe9vf95ZKzrde6z2CTaK124CSbUeG7zMCnZf9v:W72+GL9An+ZfPA1SKklSbUHzMCZf

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks