ploutus | 21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc | Triage

Submit
Reports

Overview

overview

Static

static

21eeae024b...fc.exe

windows7-x64

21eeae024b...fc.exe

windows10-2004-x64

Sharing

General

Target

21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc
Size

124KB
Sample

231012-qkaa2abe7w
MD5

6cf781a06d1a2789e1d442e22a260044
SHA1

14887597805d31f9a1c62f4b681c11d2e3d9949d
SHA256

21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc
SHA512

00e18a0f156e39f018bd8661806ddae68478c821bb4167b99580f0017e7d790744be5b76d34795619f61fdb86113e1d626d78b159545cb632fdd297815960c5f
SSDEEP

3072:dKw0qsz0q9RZzFPk2I111KYTI1Uk19p86:n0q0jHMzTy1D

Score

10^/10

ploutus atm backdoor microsoft phishing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc.exe

Resource

win7-20230831-en

ploutus atm backdoor

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc.exe

Resource

win10v2004-20230915-en

ploutus atm backdoor microsoft phishing

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc
- Size
  
  124KB
- MD5
  
  6cf781a06d1a2789e1d442e22a260044
- SHA1
  
  14887597805d31f9a1c62f4b681c11d2e3d9949d
- SHA256
  
  21eeae024b237a5bae016ed7763929a1dcecfc1f32cb66089e9fb4fe235016fc
- SHA512
  
  00e18a0f156e39f018bd8661806ddae68478c821bb4167b99580f0017e7d790744be5b76d34795619f61fdb86113e1d626d78b159545cb632fdd297815960c5f
- SSDEEP
  
  3072:dKw0qsz0q9RZzFPk2I111KYTI1Uk19p86:n0q0jHMzTy1D
Score

10^/10

ploutus atm backdoor microsoft phishing
- Detected Ploutus loader
- Ploutus
  Ploutus is an ATM malware written in C#.
  backdoor atm ploutus
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ploutusatmbackdoor

behavioral2

ploutusatmbackdoormicrosoftphishing

© 2018-2024

Terms | Privacy