Overview

overview

10

Static

static

8843f39d99...a4.exe

windows7-x64

10

8843f39d99...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8843f39d991fb9ad4da612e523daa84dcea2a124b82466593aab26e65b8830a4

  • Size

    342KB

  • Sample

    221202-m29knsag63

  • MD5

    7eaecc4084e090a5f2f0325d1a88ee5f

  • SHA1

    963180155ca06a29918013c8783ad349da811e13

  • SHA256

    8843f39d991fb9ad4da612e523daa84dcea2a124b82466593aab26e65b8830a4

  • SHA512

    a7c82c560611ac19e48c9dd10ffbab64b6a5bd49bd2c2ef2b2b73a6e31418f79b5b4ff3e338111fc7e8d7f47a7e670059d1790b49e359e8924504b36c0b992c9

  • SSDEEP

    6144:v4lRkAehaKuqT+FdR4U5LUb8I77edkob1n/2ogNKtP8jv9CG3BeGldF1umkt3IJa:vkWAehJuqT4SPoInix1NgNMsp3BDlD4h

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      8843f39d991fb9ad4da612e523daa84dcea2a124b82466593aab26e65b8830a4

    • Size

      342KB

    • MD5

      7eaecc4084e090a5f2f0325d1a88ee5f

    • SHA1

      963180155ca06a29918013c8783ad349da811e13

    • SHA256

      8843f39d991fb9ad4da612e523daa84dcea2a124b82466593aab26e65b8830a4

    • SHA512

      a7c82c560611ac19e48c9dd10ffbab64b6a5bd49bd2c2ef2b2b73a6e31418f79b5b4ff3e338111fc7e8d7f47a7e670059d1790b49e359e8924504b36c0b992c9

    • SSDEEP

      6144:v4lRkAehaKuqT+FdR4U5LUb8I77edkob1n/2ogNKtP8jv9CG3BeGldF1umkt3IJa:vkWAehJuqT4SPoInix1NgNMsp3BDlD4h

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks