plugx | 2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064 | Triage

Submit
Reports

Overview

overview

Static

static

3

2d06415cf8...64.exe

windows7-x64

2d06415cf8...64.exe

windows10-2004-x64

Sharing

General

Target

2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064
Size

218KB
Sample

250103-va1gpawpdr
MD5

046bb16fd2d9749e07fa07aeffd044d6
SHA1

692d905801968e4736e0a3ded2152d77b6a38088
SHA256

2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064
SHA512

78edaf9c5d326e73198343ee9126317f44325bbf29f255907a409dfbe1b5d301c97ecfb3b07f97ba7ba18fd40a1a977fb8bbb66118e5b65962ff00a957df295d
SSDEEP

6144:KLDyFXg3/QownR9XhQNnrJ0p4ELFvST08ku1tbn:K/F3YoqR9xWrJc4ERvS48/Tz

Score

10^/10

plugx discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064.exe

Resource

win7-20241010-en

plugx discovery trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064.exe

Resource

win10v2004-20241007-en

plugx discovery trojan

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064
- Size
  
  218KB
- MD5
  
  046bb16fd2d9749e07fa07aeffd044d6
- SHA1
  
  692d905801968e4736e0a3ded2152d77b6a38088
- SHA256
  
  2d06415cf8ff8aacce1b0d994a269c52810c9324254a33a2bea0d134dc17b064
- SHA512
  
  78edaf9c5d326e73198343ee9126317f44325bbf29f255907a409dfbe1b5d301c97ecfb3b07f97ba7ba18fd40a1a977fb8bbb66118e5b65962ff00a957df295d
- SSDEEP
  
  6144:KLDyFXg3/QownR9XhQNnrJ0p4ELFvST08ku1tbn:K/F3YoqR9xWrJc4ERvS48/Tz
Score

10^/10

plugx discovery trojan
- Detects PlugX payload
- PlugX
  PlugX is a RAT (Remote Access Trojan) that has been around since 2008.
  trojan plugx
- Plugx family
  plugx
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

plugxdiscoverytrojan

behavioral2

plugxdiscoverytrojan

© 2018-2025

Terms | Privacy