Overview

overview

10

Static

static

7

s.exe

windows7-x64

10

s.exe

windows10-2004-x64

10

out.exe

windows7-x64

1

out.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    s.bin.zip

  • Size

    238KB

  • Sample

    240201-sz3bgaggb2

  • MD5

    c3fc842838946bf9766e7b5aabe50e1b

  • SHA1

    bc2c0ef06cf6d1bb4c09f63b005a651cf710dd6f

  • SHA256

    da7afec9f350f42f012d199c0e67f5772322193f9a414f1cc417bce68318f2ef

  • SHA512

    ce8368e2c69b44f97df6033bc807ca707ba217871a212a2b7266930acfffdc19074fd5ee2ce9eec543821660df17866fa9ff754b7da57b051a3dd7a93b566558

  • SSDEEP

    6144:x02ujWjcnSwUGF9e5cjYsqhGzq4aeBla6fhbsY//3Y/k2:u2xjFwUpSYbhS5aeBg6Zbs6wX

Score
10/10
plugxtrojanupx

Malware Config

Targets

    • Target

      s.bin

    • Size

      254KB

    • MD5

      4485d8844b083564cf510271d90d7399

    • SHA1

      769d564f9b895c8d07fee07733782c548e30267a

    • SHA256

      fd149c94edb66bd0951a544cb646c582c8d3f1edb01945579af7d1122a595b1f

    • SHA512

      0f0e1eb3249e1a73ab51b08462dfd8871c9fe5db7b87090635a8b6930c830440a2a225c4e1ed5e8f596cea1672f65fcb1a383a47ea9e4133bde8cc9ed793efeb

    • SSDEEP

      6144:h+lSr5QA7XPoS5Ut7Qjs+oQmAWN3/+Ne1YmWpm0+ie+z:Zr5Q0oS5Fjs+MAU/Lypmr+z

    Score
    10/10
    plugxtrojanupx

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      out.upx

    • Size

      464KB

    • MD5

      d1d2ab0ae599ffec0a90045dd3c6d19b

    • SHA1

      01a3bf45b1940a37d48fc0e034c8a1a45890d7b9

    • SHA256

      ea67d704cdd771b368924a0d2f7bffdc7893171a2fd61c2728827bcaacf49e60

    • SHA512

      99cc68d81b9a812afd9f6203289b706f386cc52da9cfffbfba33c041dbcdf68b86e4c1c7e329877898edc1ab52e298ae23a950557f928d943dad9e8a329cbd2c

    • SSDEEP

      6144:MqUPBpihMaunkTBP1xnA9bmAX8j5JGbTPh4aEZFMZe+zLu:JUPIM7nkx1l0TX89K4zEk+zLu

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks