plugx | 738525e6f38822a0466ea9859c368d2625ff598e870db0cd41499eafe19519cb | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...9a.exe

windows7-x64

JaffaCakes...9a.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a
Size

158KB
Sample

250203-nevcxazjhv
MD5

87e8d91f41bdf424ede7d2d0139d7f9a
SHA1

549490ff753f5f8aaab5a57fd143d8e9b32aee9b
SHA256

738525e6f38822a0466ea9859c368d2625ff598e870db0cd41499eafe19519cb
SHA512

ab6859473afc86a46b07f0a8301e7697d67de3272627543bbf0d7bf35fe768524d48c6ca6eb9be706e748e1fb03bbb6975f7605a2f78530e7b45bc0c30aec929
SSDEEP

3072:qnvTqkBbgv/inBu6XIX88vTglZTvY6CB6SmIvbp99:qnrBJAVX88bgTTw6CcvIvbp9

Score

10^/10

plugx discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a.exe

Resource

win7-20240903-en

plugx discovery trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a.exe

Resource

win10v2004-20250129-en

plugx discovery trojan

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a
- Size
  
  158KB
- MD5
  
  87e8d91f41bdf424ede7d2d0139d7f9a
- SHA1
  
  549490ff753f5f8aaab5a57fd143d8e9b32aee9b
- SHA256
  
  738525e6f38822a0466ea9859c368d2625ff598e870db0cd41499eafe19519cb
- SHA512
  
  ab6859473afc86a46b07f0a8301e7697d67de3272627543bbf0d7bf35fe768524d48c6ca6eb9be706e748e1fb03bbb6975f7605a2f78530e7b45bc0c30aec929
- SSDEEP
  
  3072:qnvTqkBbgv/inBu6XIX88vTglZTvY6CB6SmIvbp99:qnrBJAVX88bgTTw6CcvIvbp9
Score

10^/10

plugx discovery trojan
- Detects PlugX payload
- PlugX
  PlugX is a RAT (Remote Access Trojan) that has been around since 2008.
  trojan plugx
- Plugx family
  plugx
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

plugxdiscoverytrojan

behavioral2

plugxdiscoverytrojan

© 2018-2025

Terms | Privacy