General

  • Target

    af5182946b0a6bc0b457a048c133d5b23fa4ab2411f7833f0c5513a5994fc5f0

  • Size

    252KB

  • Sample

    221130-sjk29abb23

  • MD5

    cddfa154bbe89d4627210eba087c3504

  • SHA1

    eab98fc12e896f1e91960db2f7fb52c1b8767027

  • SHA256

    af5182946b0a6bc0b457a048c133d5b23fa4ab2411f7833f0c5513a5994fc5f0

  • SHA512

    8623f541c2722ea84befc9bb1f001c5e970eb936f254c9e39538749a3f3b0176cd3083c829662052048238c981a976a7f7306691cce6ea752ee508136dc0903a

  • SSDEEP

    6144:uQi0K39IDPPa9U9NrByDqXzVvdUE7HCzMCZf:3E9IDXa9erEMzVXTs

Score
10/10

Malware Config

Targets

    • Target

      af5182946b0a6bc0b457a048c133d5b23fa4ab2411f7833f0c5513a5994fc5f0

    • Size

      252KB

    • MD5

      cddfa154bbe89d4627210eba087c3504

    • SHA1

      eab98fc12e896f1e91960db2f7fb52c1b8767027

    • SHA256

      af5182946b0a6bc0b457a048c133d5b23fa4ab2411f7833f0c5513a5994fc5f0

    • SHA512

      8623f541c2722ea84befc9bb1f001c5e970eb936f254c9e39538749a3f3b0176cd3083c829662052048238c981a976a7f7306691cce6ea752ee508136dc0903a

    • SSDEEP

      6144:uQi0K39IDPPa9U9NrByDqXzVvdUE7HCzMCZf:3E9IDXa9erEMzVXTs

    Score
    10/10
    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Matrix

Tasks