Overview

overview

10

Static

static

3

f95f64c276...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f95f64c27687d6e8340c41af3b1a0128011eb61ab8a847280e8db8e344c62d86
  • Size 208KB
  • Sample250901-1afeeafp9s
  • SHA256 f95f64c27687d6e8340c41af3b1a0128011eb61ab8a847280e8db8e344c62d86
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
plugxdiscoverypersistencetrojan

Malware Config

Targets

    • Target
      f95f64c27687d6e8340c41af3b1a0128011eb61ab8a847280e8db8e344c62d86
    • Size 208KB
    • SHA256 f95f64c27687d6e8340c41af3b1a0128011eb61ab8a847280e8db8e344c62d86
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoveryplugxpersistencetrojan

    • Detects PlugX payload

    • PlugX

      PlugX is a RAT (Remote Access Trojan) that has been around since 2008.

      trojanplugx

    • Plugx family

      plugx

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks