Overview

overview

10

Static

static

3

a6571aa00e...83.exe

windows7-x64

10

a6571aa00e...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6571aa00e008bfbaf6fd5643edf0013e351ea4d3a7d5e74d3389c9d0d3a9983

  • Size

    3.1MB

  • Sample

    231208-q6c9tabga4

  • MD5

    7dce839b7c21809203977d1f8e43652e

  • SHA1

    97682e8ed74f6d72d651ca7b20538750fa888fe5

  • SHA256

    a6571aa00e008bfbaf6fd5643edf0013e351ea4d3a7d5e74d3389c9d0d3a9983

  • SHA512

    551a8bf284fcdf3adc600394cedbfcae86124f18176c2716191a997d84c7bc58bb682949b2a40aad3ced1f51e58eea77e98427e8e46cfcbf9131d5dc6b4c9c10

  • SSDEEP

    49152:fYQN8qMwZZp7mPl8aKrz8IgrquVDQPwnXAUW8kB7PBu3OG0vrxUosE:f3drp7Y8lf8I50QP8AUW8U7P4km

Score
10/10
ploutusatmbackdoor

Malware Config

Targets

    • Target

      a6571aa00e008bfbaf6fd5643edf0013e351ea4d3a7d5e74d3389c9d0d3a9983

    • Size

      3.1MB

    • MD5

      7dce839b7c21809203977d1f8e43652e

    • SHA1

      97682e8ed74f6d72d651ca7b20538750fa888fe5

    • SHA256

      a6571aa00e008bfbaf6fd5643edf0013e351ea4d3a7d5e74d3389c9d0d3a9983

    • SHA512

      551a8bf284fcdf3adc600394cedbfcae86124f18176c2716191a997d84c7bc58bb682949b2a40aad3ced1f51e58eea77e98427e8e46cfcbf9131d5dc6b4c9c10

    • SSDEEP

      49152:fYQN8qMwZZp7mPl8aKrz8IgrquVDQPwnXAUW8kB7PBu3OG0vrxUosE:f3drp7Y8lf8I50QP8AUW8U7P4km

    Score
    10/10
    ploutusatmbackdoor

    • Detected Ploutus loader

    • Ploutus

      Ploutus is an ATM malware written in C#.

      backdooratmploutus

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks