Extracted

• • Target

    aa.rar

  • Size

    191KB

  • MD5

    1f5da599ec39b53f38093acb1d77d8e4

  • SHA1

    f2c6a5094baed51cb35151271394bd208226fc6d

  • SHA256

    a0b1b2960c06849e66e36c739829d409d03870e400d6402f438e80741cb2ef34

  • SHA512

    e9e21285bca2156b6320a60a4d2de1e67ac266e4483663b8bb47569b357ff8e287149f5dbe6b0fe88d3ed898f96ce12e3394378e684722ddee9cc1d930237a0c

  • SSDEEP

    3072:QFkxQpxPrp85bdiA7OW6QyxrWHONGmLnSxMs8a2HOeAtz3z0a4Gn8:Qf7sEA7Odhx1fat2ub7T/n8

  Score

  10^/10

  plugxpersistencetrojan

  • PlugX

    PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

    trojanplugx

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1