Overview

overview

10

Static

static

1acd0212ee...0f.exe

windows7-x64

10

1acd0212ee...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1acd0212ee970abfea717c2eac9a73613787f86dab42298f1d74a06f79554f0f

  • Size

    148KB

  • Sample

    221130-tysajsff44

  • MD5

    f0be554b1d9b394bc2a90322ca944fce

  • SHA1

    89bda0569dc5a83fa5e024fbe1e4338361e79719

  • SHA256

    1acd0212ee970abfea717c2eac9a73613787f86dab42298f1d74a06f79554f0f

  • SHA512

    3da7baf6b4933c90c47376ec065097de1bc2be54b44d8558d3250d620d459c9a22d74b642b33caac62321217977a55e9381e615c8cb7c3d7a15c58ff9ca136d1

  • SSDEEP

    3072:pZpnEqYRxCen7tHPr8LeThj71IgnCbHDSsYZVSXwQwdgeZ:zpn8TCuz8iThecCnSxZVSXFwdg

Score
10/10
plugxpersistencetrojan

Malware Config

Targets

    • Target

      1acd0212ee970abfea717c2eac9a73613787f86dab42298f1d74a06f79554f0f

    • Size

      148KB

    • MD5

      f0be554b1d9b394bc2a90322ca944fce

    • SHA1

      89bda0569dc5a83fa5e024fbe1e4338361e79719

    • SHA256

      1acd0212ee970abfea717c2eac9a73613787f86dab42298f1d74a06f79554f0f

    • SHA512

      3da7baf6b4933c90c47376ec065097de1bc2be54b44d8558d3250d620d459c9a22d74b642b33caac62321217977a55e9381e615c8cb7c3d7a15c58ff9ca136d1

    • SSDEEP

      3072:pZpnEqYRxCen7tHPr8LeThj71IgnCbHDSsYZVSXwQwdgeZ:zpn8TCuz8iThecCnSxZVSXFwdg

    Score
    10/10
    plugxpersistencetrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks