Overview

overview

10

Static

static

3

291976ba47...18.exe

windows7-x64

10

291976ba47...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    291976ba47cec4b3c0e31cbc50ab1923_JaffaCakes118

  • Size

    236KB

  • Sample

    240706-wlzj7sxgql

  • MD5

    291976ba47cec4b3c0e31cbc50ab1923

  • SHA1

    38273b08bd046fc29bd777c9dc4a177ae162b5f8

  • SHA256

    a78dbafaca4813307529cafbed554b53a622a639941f2e66520bbb92769ee960

  • SHA512

    0b44f02c9d37ba25b9988146bf9a516b65625ed7184c4188689eb4056945cd56e86180e21d7b157faff6acdf4991eec51b18c8d83f084652ef574b0d7ec4158b

  • SSDEEP

    3072:1H5VhrQrb6DvbqJMikwRz2Og2QTAxQ4Vt6r+CtbmMjxm8qyCz/xwDSpa:1ZkFkw1vgfCVt6r+l18qjp6Sp

Score
10/10
plugxtrojan

Malware Config

Targets

    • Target

      291976ba47cec4b3c0e31cbc50ab1923_JaffaCakes118

    • Size

      236KB

    • MD5

      291976ba47cec4b3c0e31cbc50ab1923

    • SHA1

      38273b08bd046fc29bd777c9dc4a177ae162b5f8

    • SHA256

      a78dbafaca4813307529cafbed554b53a622a639941f2e66520bbb92769ee960

    • SHA512

      0b44f02c9d37ba25b9988146bf9a516b65625ed7184c4188689eb4056945cd56e86180e21d7b157faff6acdf4991eec51b18c8d83f084652ef574b0d7ec4158b

    • SSDEEP

      3072:1H5VhrQrb6DvbqJMikwRz2Og2QTAxQ4Vt6r+CtbmMjxm8qyCz/xwDSpa:1ZkFkw1vgfCVt6r+l18qjp6Sp

    Score
    10/10
    plugxtrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks