General

  • Target

    http_dll.dll

  • Size

    127KB

  • MD5

    5c28d36c6cc39b20c882cfdc1235a684

  • SHA1

    d4d829cdb28b081ed72547b8fc63bfc9aaf22f06

  • SHA256

    260bd64aff76afa4a037ea5b97499e8e5f7819ce34509360f0cbb78b42f5292e

  • SHA512

    1dfd293b47b46082890dfee015f3284f02032c942f1b51afcdd58031a7d2e80db87a7d13eda85c1ebc1acea5580b669c1d7d8b7b61c75778e663cb48b9671275

  • SSDEEP

    1536:h+sRWd4nhueU5u2s1N/47TVWeBeu644kPOLD38lKHPEryZ21uZjYCBA3MpM7c8uB:5sURE3VW8POLwlKb21uRYCuLMF6eok

Score
10/10

Malware Config

Extracted

Family

plugx

C2

www.apple-net.com:80

www.apple-net.com:443

www.apple-net.com:53

www.apple-net.com:8080

Mutex

Attributes
  • folder

    Microsoft Malware ProtectionbOr

Signatures

  • Plugx family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • http_dll.dll
    .dll windows:5 windows x86 arch:x86

    2d4775b7b89703e701e20d373dbc259e


    Headers

    Imports

    Exports

    Sections