Overview

overview

10

Static

static

3

4cd11a2596...18.exe

windows7-x64

10

4cd11a2596...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cd11a2596c130a0428b7360d2be2f64_JaffaCakes118

  • Size

    320KB

  • Sample

    240516-yvqd1aeb38

  • MD5

    4cd11a2596c130a0428b7360d2be2f64

  • SHA1

    d0001afaf54b3a94f0f4bd1e2a80db56ee187d63

  • SHA256

    4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

  • SHA512

    799ddf76568e9d241070b94ca16fc2f50f872be48c50f4f97fef40b00fafba818a236664b7b68dda493ce214f35bb6592d459db14192376be085f10e67a3c962

  • SSDEEP

    6144:7LsqHaNHt1Dw2KAQtluFrZVmPPK7B5072SwkqUGp:7gbVetlSZj5072SwkZ

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      4cd11a2596c130a0428b7360d2be2f64_JaffaCakes118

    • Size

      320KB

    • MD5

      4cd11a2596c130a0428b7360d2be2f64

    • SHA1

      d0001afaf54b3a94f0f4bd1e2a80db56ee187d63

    • SHA256

      4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159

    • SHA512

      799ddf76568e9d241070b94ca16fc2f50f872be48c50f4f97fef40b00fafba818a236664b7b68dda493ce214f35bb6592d459db14192376be085f10e67a3c962

    • SSDEEP

      6144:7LsqHaNHt1Dw2KAQtluFrZVmPPK7B5072SwkqUGp:7gbVetlSZj5072SwkZ

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks