General

  • Target

    27f49c4608311a736ef96673b2300531

  • Size

    204KB

  • Sample

    231231-ey155acdg2

  • MD5

    27f49c4608311a736ef96673b2300531

  • SHA1

    da24c13d479932796e992c1f42e979e637e476d0

  • SHA256

    93d33626886e97abf4087f5445b2a02738ea21d8624b3f015625cd646e9d986e

  • SHA512

    8a698f8ac861e5545141e36faf35e91123cdb9ddaa2f7d8923ca4d80cf276325ccba900321b3b503473d2769c93a92ec6fa9bd2c2b3f2b3552202fdf25f7d30c

  • SSDEEP

    3072:DQIURTXJ+MokVhHrSCT8u56E19MW1etykWtSGzB2P5/js9PtNCfEhaCtpe5k0gLu:Ds9ochO4r1fb+GlC5/21Nk8pOgq

Score
10/10

Malware Config

Extracted

Family

plugx

C2

rainydaysweb.com:80

rainydaysweb.com:443

rainydaysweb.com:53

Attributes
  • folder

    AAM UpdatesblF

Targets

    • Target

      27f49c4608311a736ef96673b2300531

    • Size

      204KB

    • MD5

      27f49c4608311a736ef96673b2300531

    • SHA1

      da24c13d479932796e992c1f42e979e637e476d0

    • SHA256

      93d33626886e97abf4087f5445b2a02738ea21d8624b3f015625cd646e9d986e

    • SHA512

      8a698f8ac861e5545141e36faf35e91123cdb9ddaa2f7d8923ca4d80cf276325ccba900321b3b503473d2769c93a92ec6fa9bd2c2b3f2b3552202fdf25f7d30c

    • SSDEEP

      3072:DQIURTXJ+MokVhHrSCT8u56E19MW1etykWtSGzB2P5/js9PtNCfEhaCtpe5k0gLu:Ds9ochO4r1fb+GlC5/21Nk8pOgq

    Score
    10/10
    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

MITRE ATT&CK Enterprise v15

Tasks