Overview

overview

10

Static

static

3

c0080d0f0c...18.exe

windows7-x64

10

c0080d0f0c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0080d0f0cb610c86eb8c5b08702c32f_JaffaCakes118

  • Size

    248KB

  • Sample

    240825-f1krlawgpe

  • MD5

    c0080d0f0cb610c86eb8c5b08702c32f

  • SHA1

    307864f4256f0cba0af4968d25fd6f3f4421ee54

  • SHA256

    e6940c142f3bed04eb532e78516da195b35f9fdd77b465a979b96a74c738da0b

  • SHA512

    350330bd3c0406afcdc69f47568771908079573b6a9749877bdf0044a0315f48b02c9257f6ac2ffd4924409bd80b23845cf92b452d4812b68c0542e2ce6985db

  • SSDEEP

    3072:lbd9rtYZ3XlRe4yw5n9L2Ukt6ae8nnifkkPEJJclT6mbkqFzLQwwbJEpnNJ8zzia:lbg3uc5nx+LnnSc/+xLMJWropP

Score
10/10
plugxdiscoverytrojan

Malware Config

Targets

    • Target

      c0080d0f0cb610c86eb8c5b08702c32f_JaffaCakes118

    • Size

      248KB

    • MD5

      c0080d0f0cb610c86eb8c5b08702c32f

    • SHA1

      307864f4256f0cba0af4968d25fd6f3f4421ee54

    • SHA256

      e6940c142f3bed04eb532e78516da195b35f9fdd77b465a979b96a74c738da0b

    • SHA512

      350330bd3c0406afcdc69f47568771908079573b6a9749877bdf0044a0315f48b02c9257f6ac2ffd4924409bd80b23845cf92b452d4812b68c0542e2ce6985db

    • SSDEEP

      3072:lbd9rtYZ3XlRe4yw5n9L2Ukt6ae8nnifkkPEJJclT6mbkqFzLQwwbJEpnNJ8zzia:lbg3uc5nx+LnnSc/+xLMJWropP

    Score
    10/10
    plugxdiscoverytrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks