General

  • Target

    download (4).zip

  • Size

    80KB

  • MD5

    5fa9e9db04c7ff7f173e22a4ca23f5f5

  • SHA1

    11684c602bc702f258042f86f3831474331e0223

  • SHA256

    55103d365f64281a5ba6b0527687a7be388d0db48705a5eb9ad3ed36a02ffeef

  • SHA512

    5de2307736435b53e222a7517cae925cb53267b532eedbb770d88e070b122e47fca3bc480f3c5e93ab509e0c983688d50064468982ee940d8aa63ecf5882872d

  • SSDEEP

    1536:ZUQtaq1xI1NWw7YDJFOu598TJtfyZyoAcvszsHW1AGIVFf4ZTXCp:ZRs1NB7YDXOk97ZWEszKWmGCSTXCp

Score
10/10

Malware Config

Extracted

Family

plugx

C2

45.142.166.112:443

45.142.166.112:110

Mutex

cUUEdKgjnOOOrpkUEjHp

Attributes
  • folder

    AvastSvcpCP

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download (4).zip
    .zip
  • 1.dat
  • 2.exe
    .dll windows x86

    5f58fa48f820abe26945152001e1b19a


    Headers

    Imports

    Exports

    Sections