General
- Target PlexusX-Setup-0.9.9.exe
- Size 64.4MB
- Sample260802-wm6d5sdf85
- SHA256 2bf1304e6a1439a3c437353fdb32103c2ea63c15f5a531f036cafe5ab67f0e3e
- MD5 514bfdca6323c57db730d35a11d4c9ab
- SHA1 1162b49f20ee74811f40f3cfe90cf2242eb7b0c1
- SHA512 b42ef5894573941a1bb075ca64d641e6837694af530d0fc97852abd79af097bcfe90f172f1720389a93d9d6461df7cb86ef84decb908419e8ef2ad75a88bc763
- SSDEEP 1572864:oO9GZPZXcUOdIjxxMKt0oWmtcIe/P1iQL4cLyzYxhy/:opcbdIjxtZtW/9i9Tz0E
- TLSH T1F8E7337BF28FB63EF55D1537B5B2A510943FDAA4A5228C0647E0C098DF621723D3EA06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
PlexusX-Setup-0.9.9.exe
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
PlexusX-Setup-0.9.9.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target PlexusX-Setup-0.9.9.exe
- Size 64.4MB
- SHA256 2bf1304e6a1439a3c437353fdb32103c2ea63c15f5a531f036cafe5ab67f0e3e
- MD5 514bfdca6323c57db730d35a11d4c9ab
- SHA1 1162b49f20ee74811f40f3cfe90cf2242eb7b0c1
- SHA512 b42ef5894573941a1bb075ca64d641e6837694af530d0fc97852abd79af097bcfe90f172f1720389a93d9d6461df7cb86ef84decb908419e8ef2ad75a88bc763
- SSDEEP 1572864:oO9GZPZXcUOdIjxxMKt0oWmtcIe/P1iQL4cLyzYxhy/:opcbdIjxtZtW/9i9Tz0E
- TLSH T1F8E7337BF28FB63EF55D1537B5B2A510943FDAA4A5228C0647E0C098DF621723D3EA06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.