General

  • Target

    e1a8e6f7d491a137584b40ca852494b8

  • Size

    127KB

  • MD5

    e1a8e6f7d491a137584b40ca852494b8

  • SHA1

    d7267ef81df252efe517e43730863739720c5d38

  • SHA256

    c09d86efdc1486de2dd00fdc8900ee9efc307017369b3900ce7b35e708dfcc50

  • SHA512

    3157e1ba4099fcdbb0ad9b59e2bd4a9439ee4bb97aa5b21ab36ca39978dd76d1850c38d2c280a9010d6f53a812aeb1478782a80f2eea2d54e2520fefcc87e608

  • SSDEEP

    1536:h+sRWd4nhueU5u2s1N/47TVWeBeu644kPOLD38lKHPEryZ21uZjYCBA3MpM7c8uI:5sURE3VW8POLwlKb21uRYCuLMF6ejk

Score
10/10

Malware Config

Extracted

Family

plugx

C2

detail.misecure.com:80

detail.misecure.com:443

hdviet.tv-vn.com:53

hdviet.tv-vn.com:8000

Mutex

Attributes
  • folder

    Microsoft Malware ProtectionpiQ

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1a8e6f7d491a137584b40ca852494b8
    .dll windows:5 windows x86 arch:x86

    2d4775b7b89703e701e20d373dbc259e


    Headers

    Imports

    Exports

    Sections