Overview

overview

10

Static

static

3

29f0bc408d...18.exe

windows7-x64

10

29f0bc408d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29f0bc408d724050e92230285592be7f_JaffaCakes118

  • Size

    257KB

  • Sample

    241009-dycbbsthkc

  • MD5

    29f0bc408d724050e92230285592be7f

  • SHA1

    d31fca6aea10ed571d2ffce375cfd27b6d0871f3

  • SHA256

    d64e5a258078f6655b3aa40e7bb897ff9856151b4adcdd1f5723a8b9e02bb88a

  • SHA512

    24b5ff00b7dc75e292ee104e1d9176e25c45df3907470ec2795754c026c2db02023249cffacc0757fdd10882d1ba26488350e0bbd29b4b6e5feebce5fafe9f89

  • SSDEEP

    6144:S0L10u6oC8DyzBcniBdBuGoEim9N1vXp:S0Z0jV8DacnchJ

Score
10/10
plugxdiscoverytrojan

Malware Config

Targets

    • Target

      29f0bc408d724050e92230285592be7f_JaffaCakes118

    • Size

      257KB

    • MD5

      29f0bc408d724050e92230285592be7f

    • SHA1

      d31fca6aea10ed571d2ffce375cfd27b6d0871f3

    • SHA256

      d64e5a258078f6655b3aa40e7bb897ff9856151b4adcdd1f5723a8b9e02bb88a

    • SHA512

      24b5ff00b7dc75e292ee104e1d9176e25c45df3907470ec2795754c026c2db02023249cffacc0757fdd10882d1ba26488350e0bbd29b4b6e5feebce5fafe9f89

    • SSDEEP

      6144:S0L10u6oC8DyzBcniBdBuGoEim9N1vXp:S0Z0jV8DacnchJ

    Score
    10/10
    plugxdiscoverytrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks