Resubmissions

30/12/2024, 19:54

241230-ymjw9ayme110

24/09/2024, 08:26

240924-kcchja1cla10

19/09/2024, 16:17

240919-trjptsybql10

General

  • Target
    ToDesk_x64_4.7.4.8.exe.v
  • Size 56.3MB
  • Sample240919-trjptsybql
  • SHA256 3771d6a0594a42845193f182b177151b295e458f17749e74ae5a5320210a2fe8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      ToDesk_x64_4.7.4.8.exe.v
    • Size 56.3MB
    • SHA256 3771d6a0594a42845193f182b177151b295e458f17749e74ae5a5320210a2fe8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks