plugx | befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6 | Triage

Sharing

General

Target

74668e84ee38695216ef737f389dc55c_JaffaCakes118
Size

135KB
Sample

240726-rj2jkasfnl
MD5

74668e84ee38695216ef737f389dc55c
SHA1

e4d6928f6592a2a38d880cff7e0f30db2a15896e
SHA256

befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6
SHA512

90a550498a77284e5a936d92513994976ed5b67ffd8f5ca1476570f1c7307f69ed8400e86ab2588d24c77df66279daca98e4735b1b650cf46770093a7d1b8c24
SSDEEP

1536:fS0nQkNkx7AeJRhNUoCthFYJmw44uh9nVJUWlDYnyrCo5CqydiEz1t4PpZnM+zgT:zNelNEvKWZYKika1t4PpZ/bVn7CX

Score

10^/10

plugx discovery

Malware Config

Extracted

Family

plugx

C2

rainydaysweb.com:80

rainydaysweb.com:443

rainydaysweb.com:53

Mutex

dhHRYvLNaOVJXZdDsbdc

Attributes

folder
AAM UpdatesblF

Targets

- Target
  
  74668e84ee38695216ef737f389dc55c_JaffaCakes118
- Size
  
  135KB
- MD5
  
  74668e84ee38695216ef737f389dc55c
- SHA1
  
  e4d6928f6592a2a38d880cff7e0f30db2a15896e
- SHA256
  
  befd8b5b90ef38e3d04711b0aae55805149ad1f3c77eb39bc9002760ce1684b6
- SHA512
  
  90a550498a77284e5a936d92513994976ed5b67ffd8f5ca1476570f1c7307f69ed8400e86ab2588d24c77df66279daca98e4735b1b650cf46770093a7d1b8c24
- SSDEEP
  
  1536:fS0nQkNkx7AeJRhNUoCthFYJmw44uh9nVJUWlDYnyrCo5CqydiEz1t4PpZnM+zgT:zNelNEvKWZYKika1t4PpZ/bVn7CX
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2