Overview
overview
10Static
static
3PlugX.zip
windows10-1703-x64
13BC9E9B78A...t.hlp_
windows10-1703-x64
35F9F8AC1F7...D_.doc
windows10-1703-x64
16B97B3CD2F...et.exe
windows10-1703-x64
1901FA02FFD...ar.dll
windows10-1703-x64
197C11E7D6B...l.doc_
windows10-1703-x64
3C116CD0832..._2.exe
windows10-1703-x64
10FC88BEEB74...NWORD_
windows10-1703-x64
1PlugX_3C74...20.dll
windows10-1703-x64
10originalfi...ae.rtf
windows10-1703-x64
1Analysis
-
max time kernel
127s -
max time network
131s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system -
submitted
19-11-2023 03:00
Static task
static1
Behavioral task
behavioral1
Sample
PlugX.zip
Resource
win10-20231020-en
Behavioral task
behavioral2
Sample
3BC9E9B78AC6DEE1A44436859849BBBF_NvSmart.hlp_
Resource
win10-20231020-en
Behavioral task
behavioral3
Sample
5F9F8AC1F749B0637ECA6EF15910BF21_~WINWORD_.doc
Resource
win10-20231023-en
Behavioral task
behavioral4
Sample
6B97B3CD2FCFB4B74985143230441463_Gadget.exe
Resource
win10-20231025-en
Behavioral task
behavioral5
Sample
901FA02FFD43DE5B2D7C8C6B8C2F6A43_SideBar.dll
Resource
win10-20231020-en
Behavioral task
behavioral6
Sample
97C11E7D6B1926CD4BE13804B36239AC_SideBar.dll.doc_
Resource
win10-20231020-en
Behavioral task
behavioral7
Sample
C116CD083284CC599C024C3479CA9B70_2.exe
Resource
win10-20231023-en
Behavioral task
behavioral8
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
win10-20231020-en
Behavioral task
behavioral9
Sample
PlugX_3C74A85C2CF883BD9D4B9F8B9746030F_DW20.dll
Resource
win10-20231023-en
Behavioral task
behavioral10
Sample
originalfile/PlugX_RTF_dropper_42fba80f105aa53dfbf50aeba2d73cae.rtf
Resource
win10-20231020-en
General
-
Target
PlugX.zip
-
Size
708KB
-
MD5
eeb04e18280b5027f1c299f3b1780961
-
SHA1
4361de0fb7aa2a1f15acd4396a7e1e3a34ff4fc2
-
SHA256
02cb95700440b100604ece78649b2ef41b2b7ea8ff68afbb02a01148a3f7c106
-
SHA512
14ad36c1de37272156ed8ab8939c516aca2ab884a206cc372c79253298157d2152df79623ac6f79deee6948665ff7f7376a6776ccee4c8c065fef5eeff858e35
-
SSDEEP
12288:Iaryqj09i0K3hqGRkyRZ2QSuB38ERqtxS9g2GZb0RJs89F+/dClI3PavIiCVU:vNPOGPLPx8E0xSK2mb0n9F+8lIYIdK
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\PlugX.zip1⤵PID:1032
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4808