Unplugging PlugX Capabilities
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Screen Capture - T1513 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Modify Registry - T1112 Screen Capture - T1113 Screen Capture
Show in Graph
Common Information
Type Value
UUID df3fc9d9-f89d-4778-a203-a58e7ceb869f
Fingerprint 652a086c6fb2e8a9
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 17, 2012, midnight
Added to db Jan. 18, 2023, 9:07 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Unplugging PlugX Capabilities
Title Unplugging PlugX Capabilities
Detected Hints/Tags/Attributes 32/2/5
Source URLs
Redirection Url
Details Source https://blog.trendmicro.com/trendlabs-security-intelligence/unplugging-plugx-capabilities/
Details Source https://www.trendmicro.com/en_se/research/12/i/unplugging-plugx-capabilities.html
Details Source https://www.trendmicro.com/en_gb/research/12/i/unplugging-plugx-capabilities.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Details trendmicro.com blog.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 79 
cve-2010-3333
Details File 2 
nvsmart.exe
Details File 8 
nvsmartmax.dll
Details File 1122 
svchost.exe
Details File 2 
bug.log