General

  • Target

    8f42a57b7547554fb685f15e4a724582

  • Size

    160KB

  • MD5

    8f42a57b7547554fb685f15e4a724582

  • SHA1

    707a8d09a7a2e0b7430bd0bdc596112709366d02

  • SHA256

    b82752e798eec15d7e5ff9bbef1e9eabb2ee862ea904b327f4322fa55a18cc3f

  • SHA512

    d269d6c4ec9b984e1b59f53b470e724bd6cc216697c003f87a94358a42042833a9ca2e2f61b42ef8e1262b18da8ae70ffbae9f6bba9b5771ab6cd9d624f692c1

  • SSDEEP

    3072:SXZC1fhEIosP/HMP7kUj6IXE6i1xRqLCJVQyyR:uC1fWIpP/H67kU+I06i1D6

Score
10/10

Malware Config

Extracted

Family

plugx

C2

103.56.53.106:80

103.56.53.106:110

103.56.53.106:443

103.56.53.106:5938

Mutex

NNGImYkfJjsgtpySSbCY

Attributes
  • folder

    AvastSvcXoF

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f42a57b7547554fb685f15e4a724582
    .dll windows:5 windows x86 arch:x86

    397051b6d9c5c8b855041d0a2769af43


    Headers

    Imports

    Exports

    Sections