Overview

overview

10

Static

static

10

e3dace173d...18.dll

windows7-x64

3

e3dace173d...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3dace173ded785a9af4a9007587eec6_JaffaCakes118

  • Size

    159KB

  • MD5

    e3dace173ded785a9af4a9007587eec6

  • SHA1

    2b746a247ef14585e9102336939e341f62cc6b67

  • SHA256

    dce920f5db90efecc7fb7a6b6399c80fc83e3f1251f160cd1295b6a4b67125d4

  • SHA512

    da3c9481438b4373c328904aac1ed64a1d20c02a558573543b36fc35a1f296664b518243fe4431b8b19c85678271cc0e7215aae7dd3769d998a45297dccb3b25

  • SSDEEP

    3072:+MZgx/c7SKIPuExpL/bZdHXC3e81wBguUqp5uws:1gx/ySfPuExpDbZdHXCe81wDq

Score
10/10
plugx

Malware Config

Extracted

Family

plugx

C2

45.251.240.55:443

45.251.240.55:8080
Mutex

eZlapRxpEQvscgtWBqqr

Attributes
  • folder

    AAM UpdatesBif

Signatures

  • Plugx family
    plugx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3dace173ded785a9af4a9007587eec6_JaffaCakes118
    .dll windows:5 windows x86 arch:x86

    9ac5a54fc7fd8bbc266cbaeb715d2c69


    Headers

    Imports

    Exports

    Sections